ffffff, 0x390, 0x390, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30, 'esp\x00'}, {[0x4d3, 0x4d4], 0x1}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0xc10, 0x0, 0x1, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xd, @rand_addr=0x64010101, @broadcast, @port=0x4e23, @gre_key=0x401}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x81, 0x7, "aec416940ccd674e689b4ece400178950ba79eb26d55bf7087fa3fcb53e2"}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00', 0x0, 0x8, 0x2, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x16, @remote, @loopback, @gre_key=0x1, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x2, 0x4}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1c, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@empty, @gre_key=0x9, @port=0x4e23}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

10:14:47 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8)
stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f00000002c0))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x9, 0x6, {r3}, {<r6=>r5}, 0x7, 0x7fffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r8, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, 0x0)
setregid(0x0, r9)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x100)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="02000400", @ANYRES32=r1, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB="021fc3e3a603e9e6bf2c4b89dc90641d00100063b47c6c1e14be09c1bc9bb75a1ed3c857b8a3c5cc28fffe2f889ae93b23d7c13800597dec9c1c0daef581c6551eb34215bd294f95bf1f0b69b09210bbf618603dea5b1e67946710bcb059762765686d994ce4ccdf03d29bb8515fb7185634ec9e5b114b30b819ec287155b500b0", @ANYRES32=r6, @ANYBLOB="0a002ebc000600", @ANYRES32=r8, @ANYBLOB="04000d000000000008000200", @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="10000500000000002000050000000000"], 0x6c, 0x3)

10:14:47 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "fb9da1e76732ab2c", "ccf1914c57d293fc3c73ddc993bb6780e902d683622ff7a04011075f85d1073a", "ca099bbf", "4a71db75f09bf1b6"}, 0x38)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x111000, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000080)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r6, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x1c}}, 0x20000000)

[  566.106450][T19050] overlayfs: failed to resolve './bus': -2
[  566.179587][T19050] overlayfs: failed to resolve './file0': -2
10:14:48 executing program 1:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x57}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)

10:14:48 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1180814, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)

10:14:48 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000040)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000844)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000bf0f0000000000000598c78429993f861488031cf25b062ae9cfdf78dc4bdebb906b007056162de41f05dd51422d42482140fa56b36c1c6ed863fffa93b7841804ff20037bf2915a6efa7f7a280d06fc619f895f676bd29c449f90ed5be7deb4e77e2dbe02532ce4354d6f3a5a9f7f9dcb2fd205d8b44a4ebf4e1c4fb7390f1b8ec16734bce308a5bd8c0da601a0e1afedca868dae0ef2a83ea9aebe6786dc828182000000000000000004b38c088eadb1f74034669e0b950aab7574406e205f2d64f55a68b5"])
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0x1}], 0x1, 0x0, 0x0, 0xf00}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ff0900bfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c222375e37391b130150c62f164f09060000000000000013a80c19aab9d611f5969f62c28b22756bedf3cf393d14c46cc4f716da4f0de8163f6242fa7323f1740637c48468766a1841439fce41f144631ac262dcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558050400ff0498dc4ea1d75d3066d52dbb55d0e331a5fb33abadd3a0c218078be8d75aabad71bfc70281251ab136740a4781353d114e024762f07612b1c3d686f1264c8fc62e06000000fda8c226f236b2b017b569762fa39884bd1dc08eb9d6c91b9364b7bcf572d0cb617949863303de732a92ce1bdc2fc568652ea4e96ceb14693c84382d3b09a1000000000000000000000000ae8d804b53c7e864d994800486ce4d2f3b58a947ef31f1d41d2b16454add03e2aec5f9c93f9d3e43a52d2c615cdd265e649c770cfa9b47b812c79bf0a685ce152bc4fdb7c49e5c4643ff8902de09ff8fe5709f06f2dcc31cc45c"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x11, 0x8000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)

10:14:48 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d0c7f0dc4a6133"], &(0x7f0000000040), 0x0}, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000080), 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe83, 0x11, 0x0, 0x27)
syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x3, 0x2)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000001340))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b0b, &(0x7f0000000040)='wlan0\x00')

10:14:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fgetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}, &(0x7f0000000040)=""/89, 0x59)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x3, 0x4)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={<r2=>0x0, 0x80}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x7, 0x8000, 0x8000, 0x81, 0x81, 0x1, 0x7, 0x401, r2}, 0x20)
getrlimit(0x6, &(0x7f00000001c0))
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r3 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x100000000, 0x44001)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000240)=0x7, 0x4)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x280c0, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x104e0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000400)=0xe8)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000440)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6})
ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000480)=0x3)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x202, 0x0)
ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000000500)=""/197)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private0}, 0x0, @in6=@empty}}, &(0x7f0000000740)=0xe8)
getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000780)={@local, @rand_addr, <r9=>0x0}, &(0x7f00000007c0)=0xc)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000003e40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003bc0)={0x218, 0x0, 0x138, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4}, @ETHTOOL_A_LINKSTATE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x40880)

10:14:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="900000001000432408e623a2fb914371e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00b881c0d39d10b70b3f960daefd9c0b18ce", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c0002000800024838bdeeb18f657e690f26bd710d484200ac"], 0x90}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x20003, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r4, 0x7, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}]}, 0x20}}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x274, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x430}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x96670000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf65}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe674}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xeca}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xca6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x34}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd7dc}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf93}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20}, 0x1)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r5, 0x0, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000500)='memory.swap.current\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1ac, r7, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x232}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8080}, 0x24044854)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000480)=0x2)

[  566.784673][T19133] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'.
[  566.845030][T19133] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'.
10:14:48 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)

10:14:48 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002106100ff02ff000000000008000100ac1414"], 0x1}}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:14:48 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x17}, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @echo}}}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={r6, 0x9}, &(0x7f0000000200)=0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001500)={'vxcan0\x00', <r7=>0x0})
bind$can_raw(r0, &(0x7f0000001540)={0x1d, r7}, 0x10)

[  567.225631][T19165] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'.
10:14:49 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000040)={0x9c0000, 0x7fff, 0xfffffffb, r4, 0x0, &(0x7f0000000000)={0x9a0908, 0x4, [], @value64=0x401}})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0)

10:14:49 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80000, 0x0)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x20)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x10, 0xffffffffffffffff, 0x10000000)

10:14:49 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x20a0411, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
stat(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = accept4$x25(r0, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0)
fchown(r2, r4, 0xee01)
fchdir(r0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000480)={{0x0, 0x0, @identifier="5c56acf021c9b858027b8f8f28c30e94"}})
chown(&(0x7f00000001c0)='./file0\x00', r8, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0xc0c93, &(0x7f00000003c0)={'trans=unix,', {[{@cache_mmap='cache=mmap'}, {@access_uid={'access', 0x3d, r1}}], [{@dont_appraise='dont_appraise'}, {@fowner_lt={'fowner<', r6}}, {@uid_gt={'uid>', r8}}, {@hash='hash'}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '$$$\':\x1c'}}, {@subj_role={'subj_role', 0x3d, '&\'{'}}, {@smackfsdef={'smackfsdef', 0x3d, '!&'}}]}})

10:14:49 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a010000000010af000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003"], 0xb8}}, 0x0)
pipe(&(0x7f0000000040))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r1, 0x0, 0x100000002)

10:14:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000200))
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000080)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x79c}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5b}]}, @TIPC_NLA_PUBL={0x4}]}, 0x44}}, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0xea7}, 0x100)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
ptrace$setopts(0x4206, r2, 0x7ff, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x1000001bd)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x404480, 0x0)
recvfrom$inet(r3, &(0x7f0000000380)=""/215, 0xd7, 0x1, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10)

[  567.710464][T13564] tipc: TX() has been purged, node left!
[  567.881344][   T27] audit: type=1804 audit(1593944089.735:98): pid=19194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/217/cgroup.controllers" dev="sda1" ino=16368 res=1
[  567.933672][T19194] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
10:14:49 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x200)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{@none}, {@fixed}, {@none}]})
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x101)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000180)=0x6, 0x4)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000080)={0x7, 'gre0\x00', {0x3}, 0x4})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000040)=0x3)
fchdir(r3)

10:14:50 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x74)
r0 = syz_open_procfs(0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x0, 0x110, r0, 0x82000000)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="5687595913275fd8baf8c9366cfb8716", 0x10)
r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000380)=0x14)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000011140100000000000000000008004b00280000008fbb090414b31283273d0f288f4677c137c24af0e9a5058bf1ee2338438f32bb5fa3d8578804c50ecd7721627e49afbaa2f01728d11e36"], 0x18}}, 0x0)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0))
splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='9p\x00', 0x2018020, &(0x7f0000000280)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x9}}, {@noextend='noextend'}, {@loose='loose'}, {@cache_none='cache=none'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@privport='privport'}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '/dev/video#\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/video#\x00'}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@audit='audit'}]}})
pipe(&(0x7f0000000040))

10:14:50 executing program 0:
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
lseek(r0, 0x7ffffc, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
lseek(r2, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000000c0)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRES64=r6, @ANYRES32=r3], 0xfd14)
fallocate(r2, 0x100000003, 0xfffffffffffffffd, 0x28120001)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfd14)
fallocate(r1, 0x100000003, 0x0, 0x28120001)

10:14:50 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x868001, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4d0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000010}, 0x24000080)
ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7)
fchdir(r0)
modify_ldt$write(0x1, &(0x7f0000000000)={0x885, 0x100000, 0x400, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x10)

[  568.527878][T19194] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
10:14:50 executing program 0:
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000009d0000000000fd00000000ecdf40e65cc780220000000000000000000000000000000300100000000000000000000004000f00000000000000000000000000000000000000000000200000000000000000000000000000000001000000e8194f7e0000004000000000000100258d7a3500000000000000000000000000000000000000000000feffffff00000000000000f2ff"], 0x12e)
r0 = socket$inet(0x2, 0x3, 0x3)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000280)={'veth1_macvtap\x00', 0x101})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={<r3=>0x0, 0x38000000, 0x20}, &(0x7f0000000100)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r3, 0x5}, &(0x7f0000000180)=0xc)

[  568.611740][T19194] File: /root/syzkaller-testdir173220705/syzkaller.rhBSme/217/cgroup.controllers PID: 19194 Comm: syz-executor.4
[  568.720243][   T27] audit: type=1804 audit(1593944090.575:99): pid=19202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/217/cgroup.controllers" dev="sda1" ino=16368 res=1
10:14:50 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYRES64=r8, @ANYRES64=r5], 0x3a)

[  568.868269][   T27] audit: type=1804 audit(1593944090.585:100): pid=19231 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/217/cgroup.controllers" dev="sda1" ino=16368 res=1
10:14:50 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000001070000d14a7c99c0ed7953570a5babc9ec49649f4d43f089c94088b09445577f3f9b57f0da109b121a4674e32fe03727aeb015a5938210e6f69fc0e1d7fd6befd8828b8201c316409c2f888b61d023cb0cbad2e90af6161d009c1cfdf6b11c106dc21bffa0b40d81abcc6560ff55a6951d79142043e99bfdbea2076d63d3671bdbfa4c1cfe256d6e7e3e15dd450067c1452556707b85d64925c652d389e8e3fd031631d3557c89994f5275cdc2a2ac364d65ec392705ea91ec823b8870c104be0dcd70b199837b5c172b94d93e8d3462fce5363b4de08eeb7a6c33cf56635bce0e62fc70ea0ec139c85b62c7dfefb626e0a26becfe08c332b464ea749c543ed4694a25ed82a534815508a98ef6d729d707ec11b3286c5286f4e183bb9ae953ecaf2ff41d51bf5bb02ee31ac2509417706ec5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000028dd49b8f4717f2ee29aa63698e6c491e7576209"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

10:14:50 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4)
fchdir(r0)

10:14:51 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8000)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040))
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)

[  569.411360][T17699] usb 1-1: new high-speed USB device number 34 using dummy_hcd
10:14:51 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x74)
r0 = syz_open_procfs(0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x0, 0x110, r0, 0x82000000)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="5687595913275fd8baf8c9366cfb8716", 0x10)
r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000380)=0x14)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000011140100000000000000000008004b00280000008fbb090414b31283273d0f288f4677c137c24af0e9a5058bf1ee2338438f32bb5fa3d8578804c50ecd7721627e49afbaa2f01728d11e36"], 0x18}}, 0x0)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0))
splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='9p\x00', 0x2018020, &(0x7f0000000280)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x9}}, {@noextend='noextend'}, {@loose='loose'}, {@cache_none='cache=none'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@privport='privport'}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '/dev/video#\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/video#\x00'}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@audit='audit'}]}})
pipe(&(0x7f0000000040))

[  569.798130][T17699] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b
[  569.818031][T17699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.904589][T17699] usb 1-1: config 0 descriptor??
[  570.432012][T17699] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  570.464494][T17699] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0
10:14:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xfffffffd, [0x0, 0x0, 0x74]})
dup3(r0, r0, 0x0)

10:14:53 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000b060104000000000000000000000000000900020073797a3000000000bc8533335b73ad2fab9f073fc0982103ff403a63fd9d53811290e6d354dc"], 0x2c}}, 0x0)

10:14:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'N'}]}}, 0xffffffffffffffff, 0x2a}, 0x20)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800)
pread64(r4, &(0x7f00000002c0)=""/247, 0xf7, 0x9)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:14:53 executing program 1:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
r1 = socket(0x10, 0x80002, 0x81)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xffffffffffffffa8, r0, 0x531, 0x70bd2a, 0xfffffffd, {{}, {}, {0x14, 0x19, {0x8, 0x0, 0x80000203, 0x40}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write(0x1, &(0x7f00000000c0)={0x1ff, 0x20000800, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendfile(r6, r5, 0x0, 0x100000001)

[  571.319531][T19316] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
10:14:53 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcb, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0xd22}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
semget(0x2, 0x3, 0x82)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="39c30200000000000000496756", @ANYBLOB="031e9757ff020000008648bef4c537f8e17cb4ef9a1a982bb1d6411ffc8a6227f41fc658a5ecdfcafa900f2d15f14842577e3e5368359b8ed09e7943ea9daeede24462"], 0x25)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x811)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x1000001bd)

[  571.432041][   T27] audit: type=1804 audit(1593944093.295:101): pid=19319 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir764305295/syzkaller.fDU3R4/184/cgroup.controllers" dev="sda1" ino=16381 res=1
10:14:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000041c0), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20000, 0x0)
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x800, 0x1f, 0x6, 0x81, 0x7f, 0x54, 0x1f, 0x8, 0x20, 0x7, 0x9, 0x10, 0x4}, {0x2, 0x7, 0x1, 0x3, 0x81, 0x2e, 0x8, 0xf9, 0x5, 0x6, 0x2}, {0x0, 0x1, 0xf9, 0x9, 0x4, 0x0, 0x40, 0x7, 0x1, 0x87, 0x7f, 0x20, 0xffffffffffffffc0}], 0x5})
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x503000, 0x0)
bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

10:14:54 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000240)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066edc4e179702107c4c271de9d0000000066b808000f01c9660f38806f000f011c2666b8bf008ee0", 0x53}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x5)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

10:14:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
chown(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003100)=[{{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000000880)=""/195, 0xc3}], 0x2}, 0x8001}, {{&(0x7f0000000b40)=@alg, 0x80, &(0x7f0000002040)=[{&(0x7f0000001c00)=""/194, 0xc2}, {&(0x7f0000001d00)=""/96, 0x60}, {&(0x7f0000001d80)=""/178, 0xb2}, {0x0}], 0x4, &(0x7f00000020c0)=""/167, 0xa7}, 0x2}, {{0x0, 0x0, &(0x7f0000002e80)=[{0x0}], 0x1, &(0x7f0000002ec0)=""/8, 0x8}}, {{0x0, 0x0, &(0x7f00000030c0)}}], 0x4, 0x161, &(0x7f0000003340)={0x0, 0x3938700})
sched_setattr(0x0, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000002600)=[{&(0x7f0000003400)=""/107, 0x6b}, {&(0x7f0000001bc0)=""/9, 0x9}, {&(0x7f0000003480)=""/233, 0xe9}], 0x3, &(0x7f0000003740)=[{&(0x7f0000003580)=""/1, 0x1}, {&(0x7f00000035c0)=""/193, 0xc1}, {0x0}], 0x3, 0x0)
mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="f4b8233b3f9cd358ea1c333e44f679fc2fb9947b6a83dfde6d3b5066c710cb8d7d349c6dd575aa2a4f8890fa5a203d5c5f71df63", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB])
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
creat(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
rmdir(&(0x7f00000000c0)='./bus/file0\x00')
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x20200, 0x0)
connect(r1, &(0x7f0000000340)=@in6={0xa, 0x4e22, 0x8, @mcast2, 0x1f}, 0x80)

[  573.031035][T17699] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  573.140842][T17699] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336: ffffffb9
[  573.213484][T17699] asix: probe of 1-1:0.0 failed with error -71
[  573.276676][T17699] usb 1-1: USB disconnect, device number 34
[  573.615317][T19361] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  573.920815][T17699] usb 1-1: new high-speed USB device number 35 using dummy_hcd
10:14:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000041c0), 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20000, 0x0)
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x800, 0x1f, 0x6, 0x81, 0x7f, 0x54, 0x1f, 0x8, 0x20, 0x7, 0x9, 0x10, 0x4}, {0x2, 0x7, 0x1, 0x3, 0x81, 0x2e, 0x8, 0xf9, 0x5, 0x6, 0x2}, {0x0, 0x1, 0xf9, 0x9, 0x4, 0x0, 0x40, 0x7, 0x1, 0x87, 0x7f, 0x20, 0xffffffffffffffc0}], 0x5})
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x503000, 0x0)
bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

10:14:56 executing program 5:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x164)
lseek(r0, 0x0, 0x0)
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000000))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x23)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
faccessat(r0, 0x0, 0x10)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1dd)
sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x244}, 0x1, 0x0, 0x0, 0x801}, 0x24040000)
close(r1)
r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000005}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x200004)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x3c, r5, 0x85b, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "210ab2ff0d839e000100000000000059f9d52d12f2122d3e540dbd6736b253977a35c268"}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000801}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x32c}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008840}, 0x800)
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4)

[  574.267422][   T27] audit: type=1800 audit(1593944096.126:102): pid=19372 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15874 res=0
10:14:56 executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000001c0)=0x5)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0f0000000000000000000f000008000300", @ANYRES32=r5, @ANYBLOB="05002e0000000000"], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0x20040800)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8)
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

[  574.387148][   T27] audit: type=1800 audit(1593944096.246:103): pid=19372 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15874 res=0
10:14:56 executing program 5:
exit_group(0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = getpid()
fcntl$lock(r0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffffe, 0x0, r3})
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, &(0x7f0000000000)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
open(&(0x7f0000000080)='./file0\x00', 0x40, 0x44)
creat(&(0x7f0000000100)='./file0\x00', 0x0)

[  574.600685][T17699] usb 1-1: device not accepting address 35, error -71
10:14:56 executing program 5:
open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0)
syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', 0x0, 0x200000000, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x34f9}], 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000007c0), 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000100)=@generic={0x0, 0xe97})
write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0x4c4)
r3 = socket$inet6(0xa, 0x3, 0x8000)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f00000007c0), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f0000000480), 0xa198)
socket$alg(0x26, 0x5, 0x0)
readahead(0xffffffffffffffff, 0x10000, 0x2e)

[  574.678556][T19376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  574.784531][   T27] audit: type=1800 audit(1593944096.646:104): pid=19383 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15937 res=0
10:14:56 executing program 0:
r0 = getpid()
ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x6)
sched_setscheduler(r0, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getcwd(0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:14:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x24000, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

10:14:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000040)={0xc0000000, 0x100, "9afcc0d38e412874762968eaccbfc079b9ac5e867faa6e96545699732d3c49fc", 0x949c, 0x0, 0xe3, 0x200, 0x111, 0x1c6, 0x8, 0x0, [0x0, 0x70, 0x2, 0x7]})
getpid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x2, 0x2, 0x0, 0x1000, 0x1, [{0x8, 0x7, 0x3ff, [], 0x1807}]})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000280)={0x3, 0xffffffff, 0x2})
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @remote}, 0x1c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3)
r3 = semget(0x2, 0x2, 0x24)
semctl$GETZCNT(r3, 0x2, 0xf, &(0x7f0000000140)=""/171)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

10:14:57 executing program 4:
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000dc0)=ANY=[], 0x302)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x1}, 0x44100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00')
r2 = syz_open_dev$vcsn(0x0, 0x10001, 0x0)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1)
sendfile(r0, r1, 0x0, 0xedc0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={r3, @in={{0x2, 0x0, @empty}}}, 0x9c)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r3, 0x9bc}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX=r4], 0xc0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1ff)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x80000000)

10:14:57 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r3, @in={{0x2, 0x0, @empty}}}, 0x9c)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r3, 0x1}, 0x8)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_read_part_table(0x1fd, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000400)="7d843307c9dd646fbc858c85083689f7ebf6ad15f6116a78972cb4dd9a4c4bf68f154c490f9417d61daadc043538ea071db79506688a935b41b0b1d040c18a3cfbfd4351faeb7fcc0a9867cf665759d39721079bd4fb456a4e661e549261edd371f84cb451d2160970a4dc5bb173db31798681ee4dd4a2d28e1d5e16df3207aca73490c454fe0adae5185efbbeff06ef6cca07c6fab72e905161d9dc53d93e8429bacac6df8d8883ab55dfa9acf800aff72accbe6427f0ce4564e1a75ce96425f9acab44cc34e499d1685a35e2f7c81eba00d5a6a29e899bfdcab1036bd339f3f3a6a56f59c48bb7eae756f2aec89c85ce95928cb73ed06cab911280a364e4b21bd1c101e30bd7eddf6ff267b694cb80b235d962de504763916237236838f3e899ef4d420233e3948bc98cdb7cad0c5d843b1a8eb255f8efb0378a59138011832a429bece3840af4569d95d0c23ff566b2aaba7f3c56550afc9976fbf06d11054baa47233e7d081bcfa28e5fe305c9415359a3d89f694ec4528f927bde2d962920e6cdb9bce0fa048c831c551f74d696a63ee51ac76a4a67aae72311d6cc98dbbec0f0d4cedd1626de6cc8c5025adf1d83449017ac7696cd9cf7c3a99e34a305343e3b8fe4dc5854fe7929677e2bcf538f7bdbe7054af7fd1a4ad44b59b16aaf386ad075cf849ccd5afa315e5a0456fc2eeef4534a5ac528e459361f0f5b37f89d92b4f51b3ae7400c7be6807d878362208b95911aee6e200abbabc6c31c33511d76c05fe5ab6024e1a9150449139b737134da007f8520b5f53d245ae855b94fd1e936749c63293e5c63467d0f26760724348e78a05d7112c306fa0875272972ebe5b2835ca0c61290891e7f327964fdfcf8bf3e34a8f59f47848028ac2ffb5857a0a2b36db63f6c6e2e94c7b3c834b3e0b6ec36434f3b3bb53d535d16a9b0d194ea8fe0054737550012b78968309f30fdc65cc4d01348658dfdc15a27f02d5115cff9e1eac38006717952751d79661d8bb52c896486aee6715c90089985d876871f402fe60f24dc157946934a5fa0d6794031ca2dfd14ee2f34d7843899897fb7f8b5d3e0d3de707dc403e317100b2e226951181d0b082ca4ee23426ae2ad7d0fcbcf61c6fe88408965f18ebd8c3aed52f21c63fe6f465eef92ac81d783078f1916a334c40b3c0a9d4c2fd22285da87e56375edb26ccfd5cf6ee4e9e1f4d892d9e6367184774b5182b56eb19d40a8dba7c44890d4a4045775c7ad87b72561feec493bc271173c8168d45ffcd6b88c8094712f550965a6f0a3f888a847c54b5ff57ba3cfba4e4492d94b0e169c0c10637c4e69cc375b5134ee760ea7f67a35ebdb44e99a42d92f17081b5da55ff03281abb9a8984b3987d29603f430a2b3a38603586ee8695e8b3a698eb1af7d701c7fb46c39079a3177cfc3388a1d5fe33a5e976a15ffa84424f35bf7f9dade17b60cc34710614a77a07b68416da218bb153f6c5ef936f5755f07a6cd55a16d39353cf8eab3d4acbdfca28a5eb04a3f283b73582268ebe79a3da05921f107852e7f367e0e6aee8e8a332164d36c3f2d5a7e771a9a5991279aaddc51b6ee62716556f91d6e785060f298560d2d7c32cdd092c55168242d3c35c9e6018accf69b5398d332c74aba4792cd32bf8c2e48518f085d69cbe6cbb832a40254ea7697cebecc6f9384f4432d2c610798d453833dc57efb492ed2c66cfd6de1bd0df640215b7731e49b831e433878769b884309d45a4989214e6d154f8ba5f5002acba7f9d767833cf08eb138a5994078bdebc8592e41b06a444c3f4fd18677e17bc2f34dff133724f42fe513f0aab1f01c5120ca0c69ccdcbd29fa24ca7d11f4bab68a1c7ed9a0f499e75dbca35cd16336d6ef2746b0bd5c391a9ae4d09a111cd1f1faaadfffb5b389ed95e9fb896cd430a529a10fad362e33e24ac16dfbb1e568b7834f3888a1e16bb3769d30c751ca74f859451fe265c5ecd03e4fe83222bbfebc39be08bde4b76dcb229c8294b878ae0ca379a2e2b1ead5fb0ec5849d6a7fef5f51cd2b16edc1deb898388808747138d4588ba750a655caf678bb787de3bd0785f0c4e5a026c091bfa76a7155e2a96a94ad658359637b1f5df5367fb9e14afa841ac260dadefb51a3767bf57b49ee88d2136c45365dfee0bf49ff7d38738b86d488d46991beffd411849ba00575eeef22b96d83ebee7c0e8e71be4208b2cc4dc1b110fd8e148684557433ac9d1415e8eb593ebf05ddf9638251bb48dec65f15e6545f44c565299540b4cb5b9f5e4aa6ef51dee43e9620c88996da0deee564ce0b8440581b717e3e952cc161e863f2530bcf3f6478f4ffdaa1a8ecfd376d1f201666927a5cdb4f78c17cfc4b8bbd806b49fb62fa7c15072059b3bdd923edd969b592d1f9d961c054c48a99f9a5023eeb2e8dab4ca330881a6fdf33e564592a5f9b46bde2a16d15ce1a576b54ce8a10393953c156abf28fe5bffbdd3357566d76613001fd568b2ac5daa58703b2796e7942d6a9cabe44a9e11c5ba920f8d0336420a1d139b4cae2f223ec756085d047df0a114d5365dbecd19a7d810982c383e52f4314e5b4d089002dd1a937b9a33a1057960c5a86af62f499a5ffd8a19d3ee190e530a64242cd8815baf7558856834bdd3f82a0f42faa76d5908551d380d90d9a3c50f11c638a50ae9c8784bedf02b6eed691aa25f72ea739b9f73f73dd1da9de274d19056c8de6375e4b48ce9ba4f60f3eac4337b8146a13a54d965da88f7266f3db61af2f9ff5b542af4746f81e7f9356a17f2f0894a29e85f794aa8b6af56f7dc633ed849c3b910c10fa372fce23b9e065a047665ae50c6a3f9d778989cd73f75c7e3b62605b085c7e71eccf047919dad2e4af406126d49f29246e3268cdca1001c0b88022617a54e4b194690808bdab4922e00a94d96bde65f34442d7cccfcff7ee79266dac7805eed7eb2c2e189395c76d4830f0e7f564516318049dbf2a19f7e7388200056a159a7b22902611f4fd2a670441228dd214382fc814dd57d3b2a8135ef304bbfa70308bc6c270fcc607bf3ce0997219c26cdf8f368b2dc467ffd31fbeab7b841b6c66945389c509031ce752f6ffcf0f38f3a6290e2eb18b4a6e8272a8614e551ede00ecf4a84f7ec344d819f7d0f8288b8f509d2daac62904d4afbdf0ae4729ce60e7e0f79ddf76c4afe23e28ed5e3ee37d0a4868574fe5894c5bc17b97df1c6208b5cb5bf7f5d2c8d5f1d8944283b90ec636a15fc639ba0cebd4ac456f9526b06d98cf27ac1d965b755ca4f1409b9241ad3a490abfc9a44e7b8dea90f5d8af30d632347d557c111f9125a2e1090b2ca85538462e59a28f4894921df973f5ca8c7d6704dc867ee095d4e3b62be2631d611335924b56f546b2c637df31e733457a4775bdff10f3e76921050eef4bc59e397c79b34e4aa7a040daec740c6a999feb6ca49932709c845a73595acf21a015291b450732926a56ee34c32a94c487e4ca2f482f80927a8ecacc0f77a253d823e5a430d36dceb5e9bb1436f47c8220a6c513130f7d2f60b500957ed4b41f5580e3c69f5bbd1547bd9d12c8e8abb6d4969d2fc6d8e30d4d5e23368f92799001f2c1af9f1273eb6a5cc6a336a107333838fcbd0e7d997d45cc11ad6b03b4d91133aba801435b91a18d1421a94a298d7c2d9f51a87178d8e28284b41bd550eadbe5197074a9be0722ef087b0f61054164148926c7241633d3bc6a1a78425e5b9aca6ab6a2d636455448f097949c364e43de7246c5cafc545eb2f2fbe817e9c6c09f24df3bba00d7dcc3b6610f7f345cf83da3285465e07c623a35074835a4fc518e033dcfbc9ed02fc69d515b92dcd0260a2bc496679758a35f53199bc76bb65159f9025e11435dea4d4173e06e6aa60ed394162ff796deca7bf07b50168dee9ce213a5a24a9aaaf3c8b4d3b53c8030a371ed495af3e4831e4ada8564bfe77ac50c894359d407959898cda5a838f4c8e51fd1c29c94bbc2692da09ebd2e71ff5cc4c84c5b3b275fa74aa0c06a5bb2fb03e0949389f9e03a07663cf75fd13888cc60aaa99911c8c8bd6bcedf75976c30063deecf3bcfa1b3daeac5fa54a4a388fb73dabfc826eb4feddfa83ec7beb1f3814b380386c98354dcafbe4d3b85ddd2e1858bac8fcf89c5f8ac2d7fe5780cc276f1755613b90f7ce8fc54dc04f0884089a193dc6e82bf830caacec72442a99ac7dd0b6b42ac431cb0c59b8107867440ed881e6056e2bd8d9f55258bf8cdae9ffccba16fc05e213745546e4682cfba3044474f0eca7e413d7e0a56ddf05d81268e884eb73ed5bb362f4d3b0e2d845e2046cd8c32518d854ed90d7e9daff9836f5f903cd272da6781246364dc1c4b8bcdeccac30296096270ab2542d7923ab192a621d7dc5bd96a8815a7df1f941f7b077be6a634ee460e27f8a57804e00a870c1e698f71827d1e1527e1a15e72ef276e22c8ed8de2aeba0c0fa08efc9c5bd8dcc1f731e93d61a4301cfe8d13427b98c3272df33a46e15b24e1f0d06897651359ff80d7341d08a86b477d6149543663e8a78f61e900d2c0316cf178643d0a32ec5412c85b0184b5924076c54709839d43653294ad4178f29864a05c2f1e3ed4b81e5fcee42a53371c3f91510ea3e2936f3e20abdc29c036fefafcb57ec6b62bb26ee86fa473aafaa377b3119e13945ad2b591c51e74dca6ebfdcc9f96a10a55852b7191239ae9e629ae2d261a651bb0d4c959939be3b63851ce65d7454a87f19aa080e1f3f92ce82dec9ca192ee20284e74b9c67a26f6835d50ca7b955b14501f7869300127d3ca2d72d22bddc3c8854d19a8ade8468912b6aef4874a9666b70d8df48a8a219d71243ab03e4c2b0e5b34a08a448c2464c14c7abdbff86ff4769ba3bbc07c33271c638b1de8303ad0eee0b9aa2a7045e5d066d7165cd6e1c1666a25965f9cb9a2859a1c31eccc09e1932d602fd29081ecd4a372e8b48c06bb761f8e9d351a77c5ccce4723ee98b5fb10b63daa0b5eb4b3182fc96d113786afa40a60b477bf96383c1ffb4fd9ba6f4ef6b45401c4de26322e064e467b36e0bc2f21b0c1fd08cbb8f956b0984ea71d154a430d49d2e8055876857fd3b81fe713bbaca06ac953f904ed7da63dac591404b836e1f08eab713b696638427991f06f47b7d6c370054fe12db2ab8bd9a91aba3596ec049b818ead21a33bf16fdbd74637e5de557a20c2ad0a361912d0a4952133a3d751f62094840e1c4a7c87d186dda001567766a0658eecd6f45adc5417eafbf28249efafc3414e14080322c83bc2dc0d4a491bacee63fbf7487974cec6082f89321323414b74ae953bab2e8828e1bd552591180ff1261cf0a1fffbf7079e7e9e4c82d77cfcd2e9aebe188b86fdc9550f3614de29665c1f60ad2ab7666dea984c9ac29d78915669a91073b316c4a23b4bc71c5cc562dcc56e7d138e85b97e009453446f3f80bd505ef70cc86ce6f2ce68a3dc2dfc3b3d74b616d0e25b017b83facc4c47f3143003e87a5bbc721040b7261f519402566cdfe1194ae18c264a41fc489ce2e5e2f5cc2a7f4b227ab36f3f60087d28366a74d6d0d1620bd4f7871b003f72f05ed6fbffd99bf1581b2b87bbd424b945f04c7cb2fab8eb0f75f1af2b15bb1df28d96e9ec3da16fef38686709745bb24b17828d6fc1e634e1e590c10ff6b5f7326136001aa9eccfc30a357e16bd7dbd9d45debc99e94679f7599684165ddf6a1d3d74b37397ad61f76aeb7e3a225a0dff0ba3193575cba649c556ebaa0f", 0x1000, 0x5}])
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r6, 0x0, 0x0)
ioctl$TCSETX(r6, 0x5433, &(0x7f0000000280)={0x3, 0x1, [0xff45, 0x0, 0x7b70, 0x1000, 0x3], 0xfff})

[  575.773141][T19416] Dev loop5: unable to read RDB block 8
[  575.778827][T19416]  loop5: unable to read partition table
[  575.862908][T19416] loop5: partition table beyond EOD, truncated
10:14:57 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000140)=0x4)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x43, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2ee2e32a3b88aaf3c06f497"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  575.919644][T19416] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
10:14:57 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x2c)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x81}, 0x40008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
exit(0x0)
dup3(r4, r3, 0x0)

10:14:58 executing program 1:
ftruncate(0xffffffffffffffff, 0x800ff)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', 0x0, 0x0, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xcc4}}], 0x210, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c)
ftruncate(0xffffffffffffffff, 0x800ff)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[], &(0x7f000095dffc)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000002c0))
ptrace$getregset(0x4204, r1, 0x4, &(0x7f0000000000)={&(0x7f0000000400)=""/182, 0xb6})
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000040))
sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="b91ec7b78fbe7cdd15dde8170b202f7ef475fc4cfed93d3a8e50bc5981d8c1cf6dd85a2e9df9c6974b163c199803bd875e003287f678e0364c2696c5d1710dae01e5f3b21e6e05e65ef938f6b7d298f6f2cc4792b04d1798a8bad2b13918da80e3978c8eb3", 0x65, 0x4008884, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000005c38d50506239a0950d4b5247a190bf6a3434f5e1d6c156ccedacfba99c43f3100234a56101944c79a52eb36", @ANYRES16, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00"/66], 0x48}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

10:14:58 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x200, 0x0, 0x200, 0x0, 0x0, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0xf8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1eb063546ccd56fce70cbf65d11bbcdfe2fb44e146fffc7373cfe058b91471b1f91fa3eedadf91434cf20332335cc5ef47a2f11a9ccfb3dfdf7a3bd909ac85b3"}}}, {{@ipv6={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000000)={<r6=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000040)={r6})
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000000)={r6, 0x15})

10:14:58 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffc)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e1f, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @rand_addr=0x9}}, 0x0, 0x40, 0x30, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xf)
socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="631155528d7aae5162a24f610bb76878358f029d397d4012ab437bf03eecdab143aa729584c2e83ac920f50c4f6e9fb5e675cd08658452b5ac3d0302b3699fbc020c72caf28695b6338b8b3b4ead6140ffabb2f7be5afc9024320823d9c7bcfcae9396a70ad229db04672c66c58652267fc01c02c0c4744b4b60ebd2dbe4c3239f678418f3d9848efd93a18de6f43581f78d2029a1e7ece64aae790d9ae2835e306d53ebaded357df9aba40443adb8ec6f3c4ca59d7ad53dfa0ff89c0e73", @ANYBLOB="000203000000000000000e00000008000300", @ANYRES32=0x0, @ANYBLOB="0250f7a6a2470498be60f6b4ea54ee4cfb5f85393ac0fd53dbe7c8f23b47f8fd76b5"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x200000c4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530)

10:14:58 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000002c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x4, 0x5, 0x99, 0x80, '\x00', 0x2}, 0x6, 0x30, 0x100, r1, 0x5, 0x401, 'syz0\x00', &(0x7f0000000140)=['/proc/timer_list\x00', '/proc/timer_list\x00', '/proc/timer_list\x00', '+}))^%${\xbe!\'*[%,\x00', '/proc/timer_list\x00'], 0x54, [], [0x6, 0x6, 0x5, 0x3]})

10:14:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x3, 0x5)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000202000000000c00"/24], 0x18)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@remote, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='R'], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={<r3=>0x0, @local, @local}, &(0x7f0000000080)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000c0000000900010072737670000000000c000200080000ac14140000"], 0x3c}}, 0x0)

10:14:58 executing program 0:
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c)
listen(r1, 0x400000001ffffffd)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x8000)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0)

10:14:58 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x3a)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000280))
r2 = gettid()
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x7ff, 0x0, 0x3, 0x0, 0x0, 0xfffd}, r2, 0x20000000000, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x10, 0x0}, 0x30)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000240)=0xf1d3)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x1, 0x4)

10:14:59 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = dup(r3)
rmdir(&(0x7f0000000040)='./file0\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x28, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:15:00 executing program 5:
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget(0x2, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd29, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x80, 0xfe, 0x3, 0xfd, 0x9}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x20050)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280092001000100880900000400038003000000000000002f7948c36895a024000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000000)=0x3, 0x4)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

[  578.777608][T19493] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[  578.800388][T19493] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[  578.853205][T19494] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[  578.876356][T19494] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
10:15:00 executing program 5:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', 0x0, 0x0, 0x0, 0x0, 0x1104040, &(0x7f0000000840)=ANY=[@ANYBLOB="747970653dc21ab37d2c63726561746f723d9a637b0a2c6673757569643d61356233346535372d323961302d363464382d6538", @ANYRESDEC, @ANYBLOB=',obj_role<binfmt_misc\x00,\x00'])
creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x2000, 0x0)
bind$tipc(r0, &(0x7f0000000540)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10)
syz_mount_image$exfat(&(0x7f00000008c0)='exfat\x00', &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6, 0x0, 0x0, 0x2431, &(0x7f0000000380)={[], [{@euid_eq={'euid'}}, {@dont_measure='dont_measure'}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})

10:15:00 executing program 4:
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x20000, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0)
ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080))
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = dup2(r3, 0xffffffffffffffff)
write$FUSE_OPEN(r4, &(0x7f0000000100)={0x20, 0x0, 0x1, {0x0, 0x2}}, 0x20)

[  579.298023][   T27] audit: type=1804 audit(1593944101.146:105): pid=19501 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/226/bus" dev="sda1" ino=16161 res=1
10:15:01 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
lseek(r1, 0x80000000800002, 0x0)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x23)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
faccessat(r0, &(0x7f00000001c0)='./bus\x00', 0x10)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast1, @remote, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0f08086})
write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="cc0006fce00000002f020000f9ffffff10010000000000000000000000000000d651c51a08363204761057214cd65ec4b6cc3efdb989999386b012ed2387179bcd473b9ab0dcfb5180fa96321287108d800fb6800332f0b365269ef8a9f4fc0982658d4ee30bd7c271518bacecfcbe4726844421af2a1d11a9f9e020eb0613ff9408bac4e018bc1db860aa0fe0651c96d90c579a8d91b1730300c814a9c9682d20007b04d62ba004b7e869aa6b5e73b8b2e577ebb8d1fc36e956a2e02f7c3b7bbaf32f7d4c114428ee2240a1826d7709badb55e8fa71c7a32295615030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000900000000000000000000000000000000ce0b7b5fd212695900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000009d040a1142b3dc0cabc3ab7a5e3c9472e43bcada5bb92039f3f6b22d9ef4ec4b9d9a84e7932b7172dc57481c717587d968a42d546acfa36724fefb3e5b26476fd49811dc351c998094f58e4cc174501fbd548a95d93a5ee019f49d689d03628510ec6c46ba634173a91c385d035aeeab67990ac8391dc860373f24086d0499d7b2e0ec14037030d183356132b01d7d59268f479e4f5cda46f17134a7d649aa2ec8c4bb018b08223e211d"], 0x1dd)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast1, @remote, @ipv4={[], [], @remote}, 0x80000, 0x0, 0x0, 0x0, 0x0, 0xa0f08086})
fcntl$getownex(r4, 0x10, &(0x7f00000000c0))
sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x801}, 0x24040000)
close(r2)
r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000005}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r5, 0x0, 0x200004)

[  579.451844][   T27] audit: type=1804 audit(1593944101.316:106): pid=19504 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/226/bus" dev="sda1" ino=16161 res=1
[  579.564698][   T27] audit: type=1800 audit(1593944101.406:107): pid=19508 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15826 res=0
[  579.654631][   T27] audit: type=1800 audit(1593944101.486:108): pid=19508 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15826 res=0
[  580.067988][   T27] audit: type=1804 audit(1593944101.926:109): pid=19504 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/226/bus" dev="sda1" ino=16161 res=1
[  580.172222][   T27] audit: type=1804 audit(1593944101.936:110): pid=19512 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/226/bus" dev="sda1" ino=16161 res=1
10:15:02 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa21d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:02 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x6b, 0x1, 'ipip\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x0, 0x3, @rand_addr=0x64010100}, @IFLA_IPTUN_FWMARK, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x42}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_MASTER={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}}, 0x0)

10:15:02 executing program 0:
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
io_uring_setup(0x672, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x4, 0x3b})
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x40000000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00')
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24000000)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x100060, 0xffffa88f)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)="6cfc33a24d0e7ef8a52b6e93955b192f3817897b27b7")
ioctl(0xffffffffffffffff, 0xffff, &(0x7f00000002c0)="6950ba083e3df353c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e439a65c2f246fa66a2dbe7244a5b8c42c472f8b88dd5a48821e937003098c64a443496bc3bfd8afd5b3e423a8d493806b7b7552d3")
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="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")
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10)

10:15:02 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'veth1_macvtap\x00', {}, 0x54e3})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a97f000000000000001239c769", 0xcc}, {&(0x7f0000001500)="46a43e3f510e3eac779206060abfc1e723fc59d595e9948e6d03be0d6c89d8702d5f2332fe4e991d8ce010dd173f3035a16bc1ae729800e6c53d5b3b7deacf114c931c707559610cd1366220810b11cd862202abfbcd24a76a2f0f7044964480ebd12d0bca901ac0e4e3188cb74f2b45bc4f37e1694a1e15a039e34cf59a4c86cb1dc5210f4be91e34c931eb95044d5301322e5932d3f57db1d3c57548634eaecbebc35b309eff55daa9a9e22a05e8752e", 0xb1}, {&(0x7f0000002040)="cd96bdb578810f358b2aaa005074c22ff03a81ec89f22f8ef2bacafe0e46d11b73fdeffa5726afc6a69f001fc2599736bb61d60c3c812d5418a56af9ffffff528b039a4f69e204b182765bfcff36add10caad94fd56acc52258ccc796153c7484baa5c84b6e151acc1074b87cecf8f792f3d06de49091c94d1153fc856eee3c8d6ade1aae3717248328ad8d49c876ad2e4b16a0ee3c33287445d53e289b9cd373490e67650d117a7357064421636d5d3a0b659bcbf7b84a9dd12473f80a65e4d63842c055edfea07a70e2d0e9163c2790643b8f0ff13a1c07a1ecd5a6f40dc0a8bcdb3d25334258931e901a956a033e7b8dd3ac7", 0xf4}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b40)="6048ce550fb3b26995c145bd0ae6da892b4244d894d14372cbc054cdbd281232cb292864f82755210be8ca8e2f8b782d3866251c259386b4f68545062ac0f3768848ce309fe0a0796f2d6d6b00781a14acf17c0a139e60b7b2c3cd78730b33d6eeb7012768a633a4455020a5f9f0174211a044106cbc9a1bd6dd3b6acd6a9554895e552d8ab2aae1ef", 0x89}, {&(0x7f0000002240)="f4c07ffb69b43db58c192ae931fd09e08b0a17a167c9b3416365b25b28196b77d38224f18bc08bb671e7ca417ada124f4ddcfcf686947966db558edbed2d3358485b1862a1134ae2210957feba5265f1f737690f35ccf8ac21fb91421b0aedf685061e50161bd2ee6b84c4d6759a5f15454b377879a01eb7880a7f8a1bc1f0976315a2ef48287332b31e0f35200e530979e127fa8908b4303ac92648ba88b362398bec0211505a9ad5cfe87f64a3e3a05f3156ba190237ec35b6cbf0662caa7dcd2337373af96fbec01bbd708d6a74f52ac099345311609b275d7883d49b0d66913c47860676976a04f4f9acde2ea86586eb4abb8ca5b4eebc25881803a8a50c3fd7c1470d812d6b2b05c658dfe0e2fea1808d33cdbce8633ebd032c92879e3dc844e8516923fb4e69e5bf350ad697dc0511886666b1d642991216acae4c687cb9070eaf6dac60aac2d4032dc5d24b3c1f7a5d5693b24fdf94c9f5858e5a4792fae39d2174629561a3c5690bb75e4424258ddff24aee5a761bfc30888901fa5aeb62bc5e693af019869bdb4c6b6d5b73cf74f2ecb2a2bd45d08f53a72e7df706ca6aca7a77d2ab90531a356546fb9261bac7cb32fcc3875e8edfd0b940797c753c5e23117cc8371d743a7927b048b31febd76fb04a64e6da09430d8642a513b98923f92d26535bef40848e0f08a8bdde222f6f4dd785b8953e448f47a29bc5030e5f5a69810793382fd4b7173b16a3e4920d03d7f29abb04cb48b1a71307d36d07ef5d4ec1513c106c5e4f870323463acef58e9f6d4f7f1235cf836d37111020a39497cf3b696654bb83072eeef91239fa482490ca3617eb524d5974ec756940fc9f75c60bd067dbf9bfb32683973bd39d118505ea27a3f8c75521922522d517a74a7f6bb3d6a4cc5de63eab639c504737e75942f2e3a1cb6e1577c97a9ec5a3cee7d793fffc85de4f278d0dfa946fef3e3379", 0x2b3}], 0x2}}], 0x2, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x18101, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

[  580.873304][T19518] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'.
[  580.945651][T19519] IPVS: ftp: loaded support on port[0] = 21
10:15:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r3, 0x105, 0x0, 0x0, {0x5}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa2}}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xd0, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x40}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}]}, 0xd0}}, 0x844)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r4, 0x20, 0x0, 0xfffffeff000)
fallocate(r4, 0x0, 0x0, 0x10000101)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x12e)

10:15:03 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r5, 0x1, 0x6, @random="ee76a0ea26d4"}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  581.214311][T19541] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'.
[  581.313547][T19552] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  581.374349][T19537] IPVS: ftp: loaded support on port[0] = 21
10:15:03 executing program 5:
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4)
fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = socket(0x2a, 0xa, 0x81)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x50}}, 0x8000)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x29012002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4008052}, 0x8000800)
accept$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14)
r3 = openat(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x501000, 0x1fe)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)={0xa, 0x100, 0x5, 0x7, 0x286, 0xffffffffffffffff, 0x7fff, [], r2, r3, 0x1, 0x2}, 0x40)
connect$inet(r1, &(0x7f0000000ac0)={0x2, 0x8001, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x4)
ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000b40)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000b80)=0x401)
r6 = getegid()
chown(&(0x7f0000000bc0)='./file0\x00', r0, r6)
ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000c00)={0x0, 0x8, 0xeb3c198c5d62550, 0x20, &(0x7f0000ffd000/0x3000)=nil, 0x7})

[  581.498528][T19553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
10:15:03 executing program 0:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x440002, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x2702, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)

[  581.738872][T19565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
10:15:03 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_int(r1, &(0x7f0000000480)=0x9, 0x12)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc5e]})
socketpair(0x2b, 0x3, 0x1ff, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x48, 0x1406, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x5)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
open(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x0)

[  581.821917][T19552] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
10:15:03 executing program 4:
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
io_uring_setup(0x672, &(0x7f0000002b00)={0x0, 0x0, 0xa, 0x4, 0x3b})
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x40000000)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x100060, 0xffffa88f)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e00000010008108040f35ecdb4cb92e0a480e002a000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0)
ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000000040)="6cfc33a24d0e7ef8a52b6e93955b192f3817897b27b7")
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f00000002c0)="6950ba083e3df322f10ef57332926f53c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e439a65c2f246fa66a2dbe7244a5b8c42c472f8b88dd5a48821e937003098c64a443496bc3bfd8afd5b3e423a8d493806b7b7552d3d8e7db210eb08e1b13a348b13cb21bbd44b0c95ce16f3cdaefd1dc223fe0c385cccebe12b8cb030718853bd3b6ec048fb63298263fdb3ca47b8c")
pipe(&(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')

10:15:03 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)={0x0, 0x0, @ioapic})
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x200000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  581.924780][   T37] tipc: TX() has been purged, node left!
[  581.933482][   T37] tipc: TX() has been purged, node left!
10:15:03 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000004020601020000000000000000000000001300030400000000000000742c6966616365000005000400000000000900020073797a30000000000c000780080006000000000005000500020000000500010006000000ffd7291d0337feb86724cc26e79501ae6f0161fbbe98cf9dc8e81214f43a838b54a3a1f8398b39b6689cbe30b04bbda0fc6e"], 0x58}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "a17afd643818a917", "773200072ae21c922bc98dc21107ae31623f22168140ecfae83bb81283d6f412", "801dd985", "161294ff54c251da"}, 0x38)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4)

10:15:03 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x0, 0x2, 0x2, 0x6, 0x1, 0x1, 0x80, 0x5, 0x6, 0xfffffffffffffff7, 0x10100000, 0x4})
acct(&(0x7f0000000100)='./bus\x00')

[  582.105058][T19616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.116502][T19616] device batadv_slave_0 entered promiscuous mode
10:15:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
socket(0x1, 0x803, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x40, 0x0)
r9 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r9, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)

[  582.832536][   T27] audit: type=1800 audit(1593944104.697:111): pid=19600 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16321 res=0
[  583.078023][T19628] 8021q: adding VLAN 0 to HW filter on device bond4
10:15:05 executing program 1:
syz_open_dev$vivid(&(0x7f0000000240)='/dev/video#\x00', 0x3, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010001f0774000000dfdbdf250001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002811200001c0012000b0001006d616373656300e10b00020005000a00010005000a0005403d0000000000000008000a0009d3"], 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x40080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r2, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8c49}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

10:15:05 executing program 0:
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0b93742c379983fe48e8739ad15be3b6c4a12a38fa49a987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44be32dc79b39812dda876840f3f971dd75e672624fe1584a53a"], 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200010000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a000)=@canfd={{0x4}, 0x0, 0x0, 0x0, 0x0, "0000eeec53ec0000739c699f5ff986ca08990039576a7d5cb2bdac3ea80acf584ecb5f00004e2f9663a918fa1efd9b0b0000000000000000002000"}, 0x48}}, 0x28000054)
mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="1ef62c0936b726ad97cc3da5db192770db87d0c76e9cdcf4f773f9c5fab064a4290b7c72efdfc0fec9b242ff3176469a4ecbc7ce45eba7a8833289d72270379d22829226f0b2197d630d68cc65cc844643f28310e86fb0bd7d0aebc8f5af5e4ac12137810bd030be8cbedc0d5e"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

[  583.239024][T19675] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
10:15:05 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, 0x0, 0x3c7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x70)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r3, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=""/103, 0x67, r4}}, 0x10)
r5 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x9, 0x10000)
r6 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x44}}, 0x86)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffeffff}, [@ldst={0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0xa, 0x2, 0xfffffffffffffff4}, @map={0x18, 0x5, 0x1, 0x0, r1}, @exit, @exit]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x1f, &(0x7f00000001c0)=""/31, 0x40f00, 0xc, [], 0x0, 0xd, r0, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x7, 0x1}, 0x10, r4, r5}, 0x78)
acct(&(0x7f0000000100)='./bus\x00')

[  583.402729][T19680] NFS: device name not in host:path format
10:15:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)

10:15:05 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280060027000004000014000300627269646765300000000000000000008669443c7df43fa2394973833ff64035a540f6cacd276270b882a4ffb38212bccd2db200601f70ebb53f7994b8288d820f7a419359f7c215abb449e1991eaa"], 0x50}, 0x1, 0x0, 0x0, 0x1110}, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r3, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat2(r5, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x100, 0x130, 0x1}, 0x18)
ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x40)
ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000040)={0x41, 0x19278895325e0477, &(0x7f0000000180)="9bdef7fe1a3f712f91032876cbb24e0d13f0c37b81d010556126dc647d91c783de53de4894fecf3816cf4d9473da9012833d32ff86e0e263e03b3cc685318a45c43602777f681c54d262dc8b6ba26664b9491bb0ac7d8d29459061537f1bbb1b654e5f4e6af8e61393200b92ed732f60406b1d66960ffabc024e296521b6ef13ce7e552a756e9b2bb969fc7558ca88c02fdfab64ed56854d63d4caad84c9c158b108703d0b38819158321ba598d3cce826fa82de56", {0x7fff, 0xb4, 0x32344d59, 0x1, 0xfffffffd, 0x6, 0x3, 0xd9}})

10:15:05 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)

[  583.632518][T19691] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  583.839912][T19691] 8021q: adding VLAN 0 to HW filter on device bond6
[  583.897680][T19691] bond5: (slave bond6): Enslaving as an active interface with a down link
[  583.941629][T19691] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  584.063396][T19706] 8021q: adding VLAN 0 to HW filter on device bond7
[  584.075581][T19706] bond5: (slave bond7): Enslaving as an active interface with a down link
10:15:06 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x400, 0x89}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0)=0x101, 0x4)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r2)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000080))
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_S390_UCAS_UNMAP(r5, 0x4018ae51, &(0x7f0000000040)={0x8, 0x9, 0x7fff})
openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @multicast}]})

10:15:07 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000001000000000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)={[{@fat=@check_relaxed='check=relaxed'}]})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.opaque\x00')
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

10:15:07 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/220, 0xdc}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000340)=""/156, 0x9c}], 0x4, &(0x7f0000000440)=""/9, 0x9}, 0x48bbf753}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/171, 0xab}], 0x5, &(0x7f0000000840)=""/202, 0xca}, 0x42}, {{&(0x7f0000000940)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/62, 0x3e}, {&(0x7f0000000a00)=""/216, 0xd8}], 0x2, &(0x7f0000000b40)=""/255, 0xff}, 0x7}], 0x4, 0x40000020, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00')
preadv(r0, &(0x7f00000017c0), 0x1f4, 0x2)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x84, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x66, 0xac, "1502cafd49879ef30891ee81846044ed9a60b74d4f62698db660ee264433e3a1d3ec40acddde15b77486a136b0ec0b6e84b6083b5b2725b23c5f7eff39cbd7074a4bd5710b8415d0b42489c6c1fac84a9bcc29ad1f1a468e43a14a7d78b9db8a6092"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}]}, 0x84}}, 0x4040048)

10:15:07 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4193, 0x200}, 0x1008, 0x0, 0x8, 0x6, 0x800000000020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:07 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1409, 0x2, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xee7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xee7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe05}]}, 0x20}}, 0x24088840)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r4)

10:15:07 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00')
r1 = dup(r0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)={0x3, 'nr0\x00', {}, 0x3f})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, 0x0)
setregid(0x0, r5)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000340)={0x78, 0x9, 0x1, {0xb5, 0x8000, 0x0, {0x4, 0xffffffffffffffe0, 0x1, 0xfffffffffffff49a, 0x49f1, 0x184, 0x382, 0x0, 0x1, 0x3ca7, 0x9, r4, r5, 0x7fffffff, 0x10000}}}, 0x78)
socket$inet(0x2, 0x4000000805, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000), 0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="7b00000078cb6eb48dc64cf823b3a70f84c3eacabe7748fcff5a9447307cb6ca0529605b003f6f40a0ab21a01f6aa60d2427f5bbc8ebadfa0a02aaadb90f26eda30f0a3c025c78c952bebbec861861392695228da27b2f4f00a7430199480dbda5855ce1ac0fb110ddf2d0233799da6263cc26b2f4c0fb66fb435b8b2fcdcc"], &(0x7f0000000140)=0x83)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb0)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0xc1)
renameat2(r6, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000640)='./file0/file0\x00', 0x0)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f00000000c0)='./file0\x00')

10:15:07 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000140)={0x9, 0x6, 0x4, 0x70, 0x2, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route_sched(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000080)='/dev/aats\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000004, 0x11, r2, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00')
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='cpuset\x00')

10:15:07 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f00004bd000/0x2000)=nil, 0x4000)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$qrtr(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2a, 0xffffffff, 0xfffffffe}, 0xc, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="492e6b4cb3dd0b4a055235b78fb6fe562dd3b60794e9795f4ac7242ccc2d30d110fc08c17e54b9caa42a342a0c69b093791523be0ccd2fb8d70826810d57d20a84b35b0f1ff319d5c22ac7f783963e0b2d764307a3d83045363cc051cf31edb2137a1ea2e27d8aaedf409984fbc839b993e4da79fbaf4b8547bb14f71de337d37525f0ca234ad63f2f96a20903e4769a3912742d24c52f87461d3ac850312152e536151a8a1a01cbfd3671d3c1b7692b18487f08e1532c5e51c5646670c84f9f86025b7412efb9faee5e7a57fb9e76edc0fb", 0xd2}, {&(0x7f00000000c0)="7d33724440af38b04a4c9c4cd90d380a825643eaa09ffde9e1786e5ff227319d17fc4b9f9a22153b1ce2f61e81d4f78b85f7972292b036ab3851ea5ad5947a0f08bd0528d250e0e2ce42b276dc2cb85ab068bf643d16892665016336141f78820d763b5ed1dd76f0b524f270e8626cf2c3a729e4032bbfdde000937c8e", 0x7d}, {&(0x7f0000002480)="3be2c7935f0bbfb7f5faf40c3c2755e631bebe1296cccad2cc9d18510ba77bda4eba5d8f6ab47966a23972c2a7380d92a944135467c1e20eadf6b0e8297f9f354c3919e6f8d50db5717ee08b55513e46407f39c56aebeeaef2543424d2762f0d0e828ca2522cf76e99b1771a0ef3a1bbed6eb01c57aabfd28dbacd9c7a5aa0b459268f2825c97083", 0x88}], 0x4, &(0x7f0000002540)=[{0x100, 0x110, 0x9aed, "46b1e206b1a01c125abdd550664bcf7c240e7d7a204334f9a314a1ee98d464618e940231c06bbd8962cccac4046a4edf9437531be6aab224201cf42890b4a5483767492b10f7d30bc36decac1a7ee0ec96a39ce7f563a2d30d6264da83085307d25074498e40ca46c4896e50c904dcb7b24ac1e8da52aa9385e719c8179a76b64c27c8c344bc3e5f90098536c299f8029dad1459cc26cf93185f88c495c1e31735b288e56544dac2621c1c7be9ce3ae1b77b6444399f934f22fc43aeef58a3f37dab56ce5df5167686b67586bcbb1f9ba467ae437559ac97bc62cd3bd728bfa852445cf487ef510673b56b30"}, {0xa0, 0x107, 0x0, "985626ca2fcd55fa42a7e77511103a27bea102a7d098b0a73e2ce7f7203bbb1dde58f34624270238a73c56fc8201966058f5da0554089db40015965ea5d25a7784502a441c0008c4cd543291a56428e697655ca46041fef2e5844057641a79294fae0d8ba90360585af696c418927a9e1fadfc87efbe2435fef1d149401ac6c2dee61c1e86743c2da10d"}, {0x110, 0x113, 0x8001, "69b868c204f47c9e6da71ef4469bc0e9fef965d4c134d24f3346cf7630653a8676070aa69bea51580882eb461f473ac6ae3b75340a0310c1da7516b55b4f6da64d9ee889e87e244426d534984c42508e88bdb4f67355be4fa767f54ccd81b53dcaf81a15ec94011a99961ac81c2d135d7499bb4959722c7acb24a37f4efbd8e53ed3dacdfd39b35751ba61840cee967e8a04dc63ff5e272d4a3eaa80ab203e92c0b3b0c14a4a9e3eef0511744c84c4279657819d8ff0fe5a2b8006ac76f3b59fa87699ce391e069c9b82cb046da423e62d45a3c88bf2f8802cd4e724ff74d6787f8467d770b6084d8c1eb2c09b945c531fb3c9012291b4fea4"}, {0x78, 0x114, 0x6, "f5280500150e7b848ed64b1e4d42a11fb2ee14eb4faa31140ba0601aa0d5959d02bbb797742241a83350b46e8d8d49577ff02a2a1c9fcc0b5a96e84c167d6185361ce555ba55605d307e73e9e45c9ac5b04c2c3b63a3b7dfb9cf0fdb4991256ac84f3f7b8d"}], 0x328, 0x4801}, 0x38)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f00000013c0)=""/65, 0x41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r1, 0x0, 0x0, 0x4)
mlockall(0x1)
listen(0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x5d)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000, 0x0, 0x3fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'nr0\x00', {0x3}})

10:15:07 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x4f000c, 0x8, 0x5, <r5=>r4, 0x0, &(0x7f0000000000)={0xa20001, 0x7, [], @value=0x40}})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r6=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0xffffffffffffffff, r5, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fb82, 0x0)
r8 = dup(r7)
sendfile(r7, r8, 0x0, 0x80006)
socket$inet(0x2, 0x80001, 0x84)

10:15:07 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)

10:15:08 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000202f97a501d5e122edaff"], 0x18)
r2 = dup3(r0, r1, 0x80000)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x1, 0x8, 0xffffff01, 0xbbbbbbbb})
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000640)=""/246)
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20800, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x7e, 0x40)
accept$ax25(r5, &(0x7f0000000140)={{}, [@default, @remote, @bcast, @remote, @remote, @default, @remote, @bcast]}, &(0x7f00000001c0)=0x97)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r6, r4)

10:15:08 executing program 0:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x4, 0x70})
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000240)=""/223)
r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x5, 0x8, 0x1, 0x4, 0x1b, "f06150708d696b2a"})
socket$can_bcm(0x1d, 0x2, 0x2)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r2)

10:15:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xffffffffffffff23)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
chown(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003100)=[{{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000880)=""/195, 0xc3}], 0x2}, 0x8001}, {{&(0x7f0000000b40)=@alg, 0x80, &(0x7f0000002040)=[{&(0x7f0000001c00)=""/194, 0xc2}, {&(0x7f0000001d00)=""/96, 0x60}, {&(0x7f0000001d80)=""/178, 0xb2}, {0x0}], 0x4, &(0x7f00000020c0)=""/167, 0xa7}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=""/8, 0x8}}, {{0x0, 0x0, &(0x7f00000030c0)}}], 0x4, 0x161, &(0x7f0000003340)={0x0, 0x3938700})
sched_setattr(0x0, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000002600)=[{&(0x7f0000003400)=""/107, 0x6b}, {&(0x7f0000001bc0)=""/9, 0x9}, {0x0}], 0x3, &(0x7f0000003740)=[{&(0x7f0000003580)=""/1, 0x1}, {&(0x7f00000035c0)=""/193, 0xc1}, {0x0}], 0x3, 0x0)
mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="f4b8233b3f9cd358ea1c333e44f679fc2fb9947b6a7a459e383b5066c710cb8d7d349c6dd575aa2a4f8890fa5a203d5c5f", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB])
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
creat(&(0x7f0000000080)='./bus/file0\x00', 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040)={0x1}, 0x1)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1])
rmdir(&(0x7f00000000c0)='./bus/file0\x00')

[  587.722935][T19895] overlayfs: unrecognized mount option "00000000000000000007" or missing value
[  587.816092][T19896] overlayfs: unrecognized mount option "00000000000000000007" or missing value
10:15:09 executing program 0:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x1}, 0x6d)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = dup2(r2, r1)
sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="016b7de41083a38e0377704905a680fc90ace96dfa47a5af81699ee788b611cafee796a12ef43f", 0x27}, {&(0x7f0000000180)="99dbb0643fefec39389d7fe9dfaa503383d5a90200000021b2d872", 0x1b}], 0x2, &(0x7f0000000400)}, 0x20020004)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc)

10:15:10 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x36488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendto$inet(r3, 0x0, 0x0, 0x200406ba, &(0x7f0000000080)={0x2, 0x10004e23, @private=0xa010102}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x44f4b, 0x0, 0xfffffffffffffe98)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x77, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={r6, 0xa3, "4d80153889d5952db2970217745bb8cfa6487dfc459deab93788b76fe135e9c315d929c82a5ca127a60c3ba475c137ed9dbe7b8c07fc818c0628da49e7f158b0c985564c480ba08ef43dc251bcbd61ddcca8954454ee78291007448098964a369062a1869a616e33b2e32dd23e03f61e928bff2d7febb45bbce1a6ac602ea0533c809516275da939c3d41212b530a0afe86a7ab2ff4e6275d7891f4409a867a17e8090"}, &(0x7f00000000c0)=0xab)

10:15:10 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x535ac68b0f51297d, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x4, 0x40400000}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x100e4, 0x0, 0x0, 0xb5, 0xffffffffffffffff, 0x0, [], 0x0, r0}, 0x40)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
pipe(0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x8003, 0xce2b}, 0x14)
shutdown(r1, 0x1)

[  588.710429][   T27] audit: type=1804 audit(1593944110.577:112): pid=19852 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/230/bus" dev="sda1" ino=16382 res=1
[  588.838871][   T27] audit: type=1804 audit(1593944110.577:113): pid=19872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/230/bus" dev="sda1" ino=16382 res=1
10:15:10 executing program 1:
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x365400, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e00000010008108040f35ecdb4cb92e0a480e002a000000e8bd6efb25", 0x1d}], 0x1}, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f00000002c0)="6950ba083e3df322f10ef57332926f53c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e439a65c2f246fa66a2dbe7244a5b8c42c472f8b88dd5a48821e937003098c64a443496bc3bfd8afd5b3e423a8d493806b7b7552d3d8e7db210eb08e1b13a348b13cb21bbd44b0c95ce16f3cdaefd1dc223fe0c385cccebe12b8cb030718853bd3b6ec048fb6329826")
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast1}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0x4)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')

[  588.958716][   T27] audit: type=1804 audit(1593944110.577:114): pid=19883 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir173220705/syzkaller.rhBSme/230/bus" dev="sda1" ino=16382 res=1
[  589.080250][T19919] IPVS: ftp: loaded support on port[0] = 21
[  589.364001][T19930] IPVS: ftp: loaded support on port[0] = 21
10:15:11 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syslog(0x0, &(0x7f0000000000)=""/32, 0x20)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  589.562755][ T9794] tipc: TX() has been purged, node left!
[  589.570707][ T9794] tipc: TX() has been purged, node left!
10:15:11 executing program 1:
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x365400, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e00000010008108040f35ecdb4cb92e0a480e002a000000e8bd6efb25", 0x1d}], 0x1}, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f00000002c0)="6950ba083e3df322f10ef57332926f53c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e439a65c2f246fa66a2dbe7244a5b8c42c472f8b88dd5a48821e937003098c64a443496bc3bfd8afd5b3e423a8d493806b7b7552d3d8e7db210eb08e1b13a348b13cb21bbd44b0c95ce16f3cdaefd1dc223fe0c385cccebe12b8cb030718853bd3b6ec048fb6329826")
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast1}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0x4)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')

10:15:11 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x120)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="a800f9ff1ee9291607d1d2361019f6aaad4f9a5398531984325b748dc6a7854cd062254b6895f2155744de8a51bee87ca46758f16656091dfc83164edfe4", @ANYRES16=r1, @ANYBLOB="02002dbd7000fbdbdf25110000009400018038000400200001000a004e2100000003fe8000000000000000000000000000bb008000001400020002004e23e000000100000000000000001600010069623a6261746164765f736c6176655f31000000130001006574683a6e657464657673696d3000002c0004001400010002004e210000000000000000000000001400020002004e23ac14141f0000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000014}, 0x10008001)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x3c, 0x0, 0x85b, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "210ab2ff0d839e000100000000000059f9d52d12f2122d3e540dbd6736b253977a35c268"}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x80, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xfffffffffffffeb0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, 'ag.n'}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1d8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, "203a293c6ed0429c2aedd037f7184b3077ab7c6a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, "b8191b96d90b41b18992e5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @dev={[], 0x30}}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0x0, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x0, 0x1, "470878a2c3a506cc06"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4004081)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2840208}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x1403, 0x10, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x6c}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x60, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x566, 0x100]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x62, 0x8]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4051d}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:11 executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r1, 0x7)
accept4(r1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x3, 0x0, [{0x283, 0x0, 0xff}, {0x38c, 0x0, 0x7}, {0xc0000080, 0x0, 0x1}]})
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r3 = add_key$keyring(&(0x7f0000001400)='keyring\x00', &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$link(0x8, 0x0, r3)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x77, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e24, 0xff, @remote, 0x5a2}}}, 0x84)

[  589.859545][T19974] Process accounting resumed
[  589.942497][T19974] Process accounting resumed
10:15:11 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x2, 0x4})

10:15:12 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000202f97a501d5e122edaff"], 0x18)
r2 = dup3(r0, r1, 0x80000)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x1, 0x8, 0xffffff01, 0xbbbbbbbb})
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000640)=""/246)
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20800, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x7e, 0x40)
accept$ax25(r5, &(0x7f0000000140)={{}, [@default, @remote, @bcast, @remote, @remote, @default, @remote, @bcast]}, &(0x7f00000001c0)=0x97)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r6, r4)

10:15:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x949, 0x100)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00000001c0)=0x4, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@mcast1]}, 0x18)
recvfrom$inet6(r1, &(0x7f00000000c0)=""/144, 0x90, 0x40000020, &(0x7f0000000040)={0xa, 0x4e23, 0xa00000, @mcast1, 0x101}, 0x1c)

10:15:12 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x1, 0x0, 0x0, 0x88000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = getegid()
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, 0x0)
setregid(0x0, r3)
r4 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, 0x0)
setregid(0x0, r5)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, 0x0)
setregid(0x0, r6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, 0x0)
setregid(0x0, r7)
r8 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r9, @ANYBLOB="815ba955aa93d6d4179a0afaef695c5dcb9691bf", @ANYRES32=r9], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x6}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x7}, {}, {0x2, 0x5}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x2, r1}, {0x8, 0x0, r2}, {0x8, 0x6, r3}, {0x8, 0x1, r4}, {0x8, 0x7, r5}, {0x8, 0x6, r6}, {0x8, 0x2, r7}, {0x8, 0x3, r11}], {}, {0x20, 0x2}}, 0xa4, 0x2)

10:15:12 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r3, 0x7, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}]}, 0x20}}, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c010100db65966ed11ff4627f92c30147b86c22357c259cca", @ANYRES16=r3, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x24008800}, 0x14)
acct(&(0x7f0000000100)='./bus\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x3)

10:15:12 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0xd0, 0x0, 0xffffffff, 0xd0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f0000000140), {[{{@ip={@empty, @empty, 0x0, 0x0, 'netdevsim0\x00', 'wg0\x00', {0xff}, {}, 0xc, 0x0, 0x18}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xf, "13c5"}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @multicast1, @loopback, @gre_key=0xfff, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @dev={0xac, 0x14, 0x14, 0xe}, @local, @icmp_id=0x66, @gre_key=0x100f}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'geneve1\x00', {0x36, 0x8001, 0xfffffffb, 0x2, 0xb30, 0xe0000000, 0x7f, 0x40, 0x80}, {0x8}}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x1, 0x702}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @loopback, @local, @gre_key, @port=0x4e21}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xffff00, 0x0, 'veth0_to_batadv\x00', 'wg1\x00', {}, {0xff}, 0x58, 0x1, 0x4c}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00', 0x0, 0x2, 0x1, 0x2}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x12, '4)', 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @port=0x4e20, @icmp_id=0x66}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:12 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x3, 0x8, 0x307, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000040)
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)

10:15:12 executing program 0:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x84400)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000080))
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

10:15:12 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=@routing={0x87, 0x10, 0x2, 0x0, 0x0, [@private1, @local, @mcast2, @dev={0xfe, 0x80, [], 0x17}, @dev={0xfe, 0x80, [], 0x21}, @mcast1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x88)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1)

10:15:14 executing program 1:
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x365400, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e00000010008108040f35ecdb4cb92e0a480e002a000000e8bd6efb25", 0x1d}], 0x1}, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f00000002c0)="6950ba083e3df322f10ef57332926f53c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e439a65c2f246fa66a2dbe7244a5b8c42c472f8b88dd5a48821e937003098c64a443496bc3bfd8afd5b3e423a8d493806b7b7552d3d8e7db210eb08e1b13a348b13cb21bbd44b0c95ce16f3cdaefd1dc223fe0c385cccebe12b8cb030718853bd3b6ec048fb6329826")
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast1}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0x4)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')

10:15:14 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x9}, 0x10200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:15:14 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040))
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x7a52063e7f963240, @empty, 0x4e24, 0x2, 'wrr\x00', 0x20, 0x3, 0x42}, {@empty, 0x4e20, 0x10000, 0x0, 0x2, 0x2}}, 0x44)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x8, 0x7, 0x7ff, 0x7}, 0x10)
fchdir(r0)

10:15:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0xb6, 0x0, 0x7, 0x3f, 0x8000}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getpid()
r2 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={0x0, 0xfc, 0x80}, 0x8)
connect$inet(r2, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)
setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8e", 0x7ffff000}], 0x1)
close(0xffffffffffffffff)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0x0, @dev}, r4}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
pipe(&(0x7f0000000080))
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
socket$inet6_sctp(0xa, 0x0, 0x84)

10:15:14 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x4800000000000000}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001640)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x4, 0x1, 0x4, 0x4}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="3b5aa3ffb6043b714d3c41ef000400c5ea2bf2cbf1be98aea848c6b208aab79d5ac11430d6f98b1bce3341e55b3ad7d449d2957674b271175007cbc7b825920d50b00b3c393b9b17733b35f2bd82508d569cc6ebccd3ffca0948ad5f8679c0c30c8b7666eab60789366f80938f74a968", 0x70}, {&(0x7f0000000280)="6f0e5a7c9b424059219dc31dd69a6552b24eea3b56e46ce0dcb4804fa2556bb801d316cd22089886640ac576e1a83335568a263e3f71c4668e2b2a62ca3578bcfdaf06ab46ef4d4497f7fe98c79df5eb20956094da23f8e4facf188e51f59e2e547203bdd8d9d20a0610d13dc6c9d2811ebdc1289c4bcc19fd2bfaf7994a06a66dd423b6982682fdb998aee85a1f653387942d79454ec37af02f2b6d57cc9e3da6762cdcf106e0ba47fdb9a896597e2ed8a1ddcba429992c174f1fd69d898e", 0xbf}], 0x2, &(0x7f00000000c0)}}, {{&(0x7f0000000340)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000003c0)="bd0adabe164ed78342d83115ba060aed8ef275cf8836499870687b91f764fdc748eb67423da47564aa55204630eab9442bb283aae057046ead59373ce591a58632e3f837c4639192ce4575a0b774c6f23b3face0a14b55ee1456989d5b9e188b9a90aeb6f6afaf5b8144ca95be38848113e5", 0x72}, {&(0x7f0000000440)="efb90bbc68a0d24dc6fb012b94", 0xd}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="5b690f53cf2effba4bf2be83507272bbfc3ef432d856495e34ce27712cabae019531ff8d637e8628ea7ba0e06ff2925bceb9fdba7fc862085c9ac5cd58a7d16e458c10c1370998877d4be2", 0x4b}, {&(0x7f0000001500)="608ea671e980ad4b0f2e2df438af8554fdd8005dd30ecc39bdfe04ee7a1362780593b0e8484492b356381140cb341cb2d1875a74e4d507b41c3456e58e1e6eb14fa4d3afc8c3ac8162423bcdaee53f403eb9c9a7d3f0f3928b544ce4984a433a2fbc44ec43229cbf7a8f8c13e52dcfd721a7", 0x72}, {&(0x7f0000001580)="ec16a71561304499e1dd645bd379b43a7f864770980dbcc936c0905df263fd35866777a2cc17d9cc17457fc1c7051df2b062e4", 0x33}], 0x6}}], 0x2, 0x0)

10:15:14 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000202f97a501d5e122edaff"], 0x18)
r2 = dup3(r0, r1, 0x80000)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x1, 0x8, 0xffffff01, 0xbbbbbbbb})
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000640)=""/246)
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20800, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x7e, 0x40)
accept$ax25(r5, &(0x7f0000000140)={{}, [@default, @remote, @bcast, @remote, @remote, @default, @remote, @bcast]}, &(0x7f00000001c0)=0x97)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r6, r4)

10:15:14 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={<r6=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000480)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x2, {0xa, 0x4e20, 0x6c, @local, 0x40}, r6}}, 0x38)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r3, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={<r7=>r3, @in6={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffb}}, 0x40, 0x3, 0x9, 0x531, 0x41, 0x5, 0x8e}, &(0x7f0000000200)=0x9c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x1336, 0x6, 0x1, 0x2, 0x0, 0x3, 0x0, 0x4, r7}, &(0x7f0000000280)=0x20)
unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x200)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000002c0))

[  592.438183][T20061] IPVS: ftp: loaded support on port[0] = 21
10:15:14 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000080)={{0x1, @name="044e36f600a286d3ecbfb2a9fdabf685f4c69d60ccdcd6fa4eb2e508d28a8a14"}, 0x8, 0xffffffff, 0x7})
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000000)=0x200)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x9cbce447b9ab34a4, 0x0)
ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000180)=0x40)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000040)={0x1000, 0x5, 0x0, 0x7f, 0x81, "8786b42a7cede247147c07d10342d88c9777ce", 0x1, 0x1})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$USBDEVFS_RESET(r9, 0x5514)
sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="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", 0x12e}], 0x1}, 0x0)

10:15:14 executing program 3:
lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0)
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)

10:15:14 executing program 0:
r0 = socket$inet6(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={<r5=>r4, 0x9, 0x20}, &(0x7f0000000040)=0xc)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r5, 0x7ff, 0x2}, 0x8)
sendto$inet6(r0, &(0x7f0000000080)="9000000018001f15b9409b0dffff00000200be30080006050000030043000f00fe000000fac8388827a6c5a168d0bf46d32345653600648dcaaf6c26c2915bc549935ade4a460c892e1ae9d520a3227d509058ba86c902080000141239540300160005000a000000000000005e471f000001000000731ae9e0ff57fd68be479a2352c08331b7ffb6ac62bb944cf2e79b", 0x90, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={r7, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={<r8=>r7, @in={{0x2, 0x4e20, @broadcast}}, 0x80000000, 0x8, 0x8, 0x9, 0x0, 0x4, 0x99}, &(0x7f0000000280)=0x9c)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0x80000000, r8}, &(0x7f0000000300)=0x10)

10:15:15 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfff, 0x4)

10:15:15 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socket$phonet(0x23, 0x2, 0x1)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)

10:15:15 executing program 1:
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x365400, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e00000010008108040f35ecdb4cb92e0a480e002a000000e8bd6efb25", 0x1d}], 0x1}, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f00000002c0)="6950ba083e3df322f10ef57332926f53c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e439a65c2f246fa66a2dbe7244a5b8c42c472f8b88dd5a48821e937003098c64a443496bc3bfd8afd5b3e423a8d493806b7b7552d3d8e7db210eb08e1b13a348b13cb21bbd44b0c95ce16f3cdaefd1dc223fe0c385cccebe12b8cb030718853bd3b6ec048fb6329826")
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast1}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0x4)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')

[  593.231126][T20113] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
[  593.262128][T20113] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  593.324835][T20113] __nla_validate_parse: 2 callbacks suppressed
[  593.324845][T20113] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  593.394233][T20119] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'.
[  593.454632][T20138] IPVS: ftp: loaded support on port[0] = 21
[  593.455784][T20119] device ipvlan1 entered promiscuous mode
10:15:15 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  593.514263][T10863] tipc: TX() has been purged, node left!
[  593.523521][T20142] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
[  593.537635][T20142] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  593.545875][T20142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
10:15:15 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x22280, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f00000000c0)=0x1f)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000a40000)={0x2, {{0x2, 0x0, @rand_addr=0xedddb9a2}}}, 0x88)
r3 = dup3(r0, r2, 0x0)
ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000280))
r4 = socket(0x10, 0x80804, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="5524a1c9bdfbf6c323aa6bb4421baf32fc929ae2c5766d848b9700e20b56f8418afda1e3cc1aae47ee20708a9230d72cca250041db61119e414f9410e712cf8e174614f5faf290adee6a2eb5e34450f0b8c05afefa4894a5596ee71c5a002929ae3fc7ba83df1e866391aff098d4817e84c6de2d1a04edfbacfd41f65b8bc2c1ef5304dd96c0dc3062d7a85345"], 0x18)
r5 = socket(0x10, 0x80002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x1ff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0002020000000000fc0100f3c03a155c7026dc0000000000"], 0x18)
connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @none, 0xf7}, 0xa)

10:15:15 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3d, 0x0, "a3cc25cd8b71fce55c57f9175e48ffc428397f4a9dbd18410dfb81c120bfd02561190478d6fbfdc53ddf937aaf10b37198d6b03d74d942046c39507f84990c0678099971f64ac90a954914b81f9c1ecb"}, 0xd8)
r3 = socket(0x10, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r4, @ANYBLOB=') \n ', @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
read(r5, &(0x7f0000000080)=""/125, 0x7d)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x335)
syz_emit_ethernet(0x8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf8968583fe2f86dd6000004000540600fe8000000000000000000000000000aaff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r3], 0x0)

10:15:15 executing program 0:
socket$kcm(0x10, 0x2, 0x10)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0007020000000000fc0100"/24], 0x18)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001200)="c968aca8007a62e5b5ec39342c5058e18c58b03eea006f32aeeb13057b0c2aa9888d1ecf636f850edc072581e4d8e6914c885baf8842080b359a61de26560fa869eb4f2fbf650125c7ca8bf70de2673ab1c3c227b7f9b94333546e7d050083238995d5d4dd62b9f4a3bb1cc6643cb6c7fd74d2f5e90887a0df0422e0321a1d8f914d25bf05cb4bbd265de258b846f771753c0167ab2565e8ab4e9e911c56fe3ba4560637d01e136f0f17632add5430802f4bc6b647645c"}, {&(0x7f00000016c0)="b224426414fb1020564413f8c606c9fb1d13f0acd0c2371bff71fea62d31589123807e087603bdada9911fa172d4ea03b2d3ca615906f051afa0e354031397c64535f9ba5d39168e8f6b34bbc66f46f8e880540d76"}, {&(0x7f0000001740)="bfd3ea35a70d1c371e209b6c6629af4370cb4fc4ff1afd8700a79474039c52a2fc5cf14e2d383ef17bd5c5abe2acfb72a9a89b026ba7f0e56ef6540abeef6a70c1695afccfad46f25a0034f41f497121458b7c748fd2fbc4b8f8bdf9f1753f0f4b3cdcc6afed75a738596a1a2b7550dd03031b1726454027b11ed9c4b1695702cf9baf712e2fc1473dd83436f10050c82741dffeeb5a97c4181255ad003921409536101b175d964fcf65a70dd8262c2fa54d802754bccbcfb6f300a1630d835828b0acb62b2bcd3f617e5f7a88b097784d72d657d20d0dc09e487df01072528045e574cf5d5b7dcf556ebe01f72d8bc099a40735c83e80addb55602a1ebe0795a3471156c54c1f83d3243b8151d0c416abcf31082447f1dde27b8eebf54e9a87f7d35fa15803d3f72cd0647498649d46b2cec6869fbf51cd2d74e0a31ac090d88c4ab325414ea13b731b03e08a280c1223b0aace588dd5eadeb935521d762829b0a4d130b94c", 0xfffffffffffffe76}, {&(0x7f00000013c0)="bf72403efbec1c4f4fa9822e13a7afd8703922785eea4b696d82ba715fd29b3044fb73ce47e61cda192d9a087932415d02deed67e0b8a000214fc4538b103a8d4fa68ed4ec2f0c5186fcf2834296472d2ca60949ad78ce7d74a6f7ce160dcf311efa45ce441b1671977933c3a977adc05540b6212e5475c2792718d525cdbdfb34"}, {&(0x7f0000001480)="0df6f14c39f4c56ae47e50e42d47357240ac5a28c4944fa373d5ce8230bc5474268f90ad1277049ac15eee274862a0ffc2e90d333062f2a2c01211917e5c46aa1c7d3e21c3b8bfa5f0eb3bf809c30962299e8a69e66d4af5fa49a6d45657d205c4443f9e75b842f9dbea31998a1ea4bc5de069de6fbfe713593ab9332586f3cc8fa18fa87f808acbd694337e942f8257a225c97180cfd8cef5caee13357f000000822cb07d6892dbc8", 0xa}, {&(0x7f0000001540)="f64bc46eec5ad6c9abfafeb608eb31e88b33367f8b6136a97725f137277514ec611907e7dbdd80bbf16951f697d95d8d6326616682c3075ee8a861be3d5c05b7b27207bb1f9901d54581afdad0c5aecce1f1ac1d4add97e58dc9eb18ef23542ba2e460aa465f99eea82a42f3a3226fccbaf2f2171e3b1f03d15f97ba4b63bb3c7984c71263900051176c74d347075049277c57"}, {&(0x7f0000001600)="0a52bfacd68175bbd7ca893c56371f5c8c895ea07e6e926593745174de35d87a7c8d6c0184703b3b7157f2301c846e1b460f39"}], 0x0, 0x0, 0x12}, 0x4000000)
ioctl(r0, 0xca, &(0x7f00000018c0)="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")
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
fchmod(r2, 0x143)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r4, 0x0, 0x0)
ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f00000011c0))
r5 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f00000010c0)=""/252)

10:15:15 executing program 3:
syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x6, 0x1)
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={<r5=>r4, 0x80, 0x6, 0x100, 0x8, 0x427}, &(0x7f0000000080)=0x14)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0x81, 0x1}, 0x8)

[  593.883050][T20174] QAT: Invalid ioctl
10:15:15 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0)
syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./bus\x00', 0x2, 0x8, &(0x7f00000016c0)=[{&(0x7f00000002c0)="cc7686cedb44d80362e1dc4933282717a55d84dc5492", 0x16, 0x1}, {&(0x7f0000000300)="5167f76bc3dab57f0019d210126ee788188d4d7122846fce71607974be0982ff9fea78c036f956872f08a37f536c94b8288d7145f7b7719784eb0ec6d352e39e2bfc9b0e8a6c730e2eae2ef1c8b5766f21640a576aeaa5c86af7bd525ec06ca7aca6c9114fdefdc8e58856ef93e108cd631bd5a19e84960efafdba325b8748c499981ff87fb3444dda32f92f4f29a5d42f616cbb970e1b52290eabe5c5101d151ad45b", 0xa3, 0x2}, {&(0x7f00000003c0)="72de8eaf81651876f5be1e94a96aa798ac629e1fff4e166ef2be4ea780f30c5f321dbd5cb0a65aa8463dc4d249e9221e13d58fc2b054a2d54538f833b96f4756396c5dda3cd2392395d5e5d27e0bf6b5106b8b5f151d2469a7158eb81f7bbc3bcfeaa0d0", 0x64, 0xfffffffffffffff8}, {&(0x7f0000000440)="c8747722446c11087532dfd5b5302c96dd7b8d2ba20bfbcaa821f0ed47c27bbf88987f6691d84b144a0c8839013321e73c78350ed73128f73994864ef7987a5d414d3fbf5511", 0x46, 0x8}, {&(0x7f00000004c0)="2f386bc910ddbbbe7f2f772f9faf89a2a50938734f121a1b5c68f2088ebfdcf140e67b2e608b36402a21258588329c11cce82a2a7edcd49f9c37ba2bd0f8a9467243b8e302d0657728ac4cac7a313c515b6de8b7bc978b8a0a67edf7bc0bf4ef8e7ac095d6182d1d7fd047906c2e2e189485df39dba89dc955d762bf3762470522650ed5bdd13f458b865e480728ad0de38e3b6e916c5798dc17a2eaabf2a1b72b92826a46f618e35b0cf525905ee85562036be9002eaff3ae69279f36483adf754ea44a80d6bbb64f40730caad0adca515f1c8dbea70a254c0f0d52b1c307babe48499bcd7182c872b5954872339fde5eb7", 0xf2}, {&(0x7f00000005c0)="16ad9a8afb7dbabb722fdd416611d0687f03d17ed6e17815b4a8393a70562f7c88b176ce892849d89f5fc0a257b59a6fc9fdab301c3121e8f75813b34b99", 0x3e, 0x12000000000000}, {&(0x7f0000000600)="9c395c38592c0bc56751ae2a4c350301b05ce9814ef98eb7d5e818f35920fb4ea1396bb19d44ed7b1dec6fba5ad7e1958e1311cf8fd3d35f7906180b29044d269748c92d140da2cc187f7c36ef99cf039c308060fecb7c250b9ba47463dc841df7b365b0d0f5de35278b98080222e75fd6c03bec11dea27b817b0c433bff51a7a40a845ff55f61cdb00b1acefadf8e78a448978e6c9eea914611f0c7af8016e6c384198bd514e17682264b", 0xab, 0x10000}, {&(0x7f00000006c0)="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", 0x1000, 0x4c2c}], 0x801030, &(0x7f0000001780)={[{@session={'session', 0x3d, 0x3f}}], [{@dont_appraise='dont_appraise'}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/nbd'}}, {@euid_eq={'euid', 0x3d, r1}}]})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001800)='/proc/thread-self\x00', 0x490740, 0x0)
mount(&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00'/12], &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='binder\x00', 0xa040d1, &(0x7f0000000200)='\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001840)='/dev/input/mice\x00', 0x400000)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @rand_addr=0x64010100}}]}, 0x30}}, 0x10)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000001880)={0x0, r2})
read$eventfd(r3, 0x0, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r6}}, 0x18)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000001ac0)={0xb, 0x10, 0xfa00, {&(0x7f0000001a00), r6, 0x6}}, 0x18)
ioctl$RTC_WIE_OFF(r3, 0x7010)

[  593.924237][T20177] QAT: Invalid ioctl
[  593.938817][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
10:15:15 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe1d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x48, 0x0, 0x0)

10:15:15 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x21, 0x3, 0x80000000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x10}}]}, 0x34}}, 0x0)
bind(r1, &(0x7f00000004c0)=@l2={0x1f, 0x0, @any, 0x1f, 0x1}, 0x80)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r6, 0x0)
syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x7, &(0x7f0000000340)=[{&(0x7f00000000c0)="6b1a3d60bd819b2c57b2418b0fdeeaa09e4684fe5157e758f3e8559dc07ff88dba589649b69f8b8412e3212ee698410893c97ec99920c9ef4f43b03fe0f427001a16736bf9c1201c490614ca19897f87115289b5d9a84d63b59f77cae2df23fb680a869a069b5d42740fe2ad344b2c3be26befc65abf3e64edfd1f4b7d7907d3f2d66638a99913d4d488eeac58cf5d0d3a79689bd25845", 0x97, 0xcaf0}, {&(0x7f0000000180)="81847be428db0fe2dfaf61e533cf8509420c24f6351cfdb1fd1059c42a7f420b2018206849c0da015d661474e8fbf7dca8ce4fca4d0ef9e0e140d0b370cf4babaa1118088a6675739a6566c1cb3dd3d135aca485064495b553193fac81a996af50c88b61155baf04ed785d11e99ab17adf8baad29ddba7cf242c62b67b47516f5bf6ba76bcfb1cd4a74845d4e2a4", 0x8e, 0x3f}, {&(0x7f0000000240), 0x0, 0xce}, {&(0x7f0000000800)="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", 0x1000, 0x10001}, {&(0x7f0000000280)="80ce87749d846f2ac9cf647227d57b8ff35b643d5319f9f51b49f6960397bd358913fa9c8f514ca9fb7b9d472d4f28e11aac121d43de26ce61dd1d05a825cb7aa78a", 0x42, 0x1000}, {&(0x7f0000001800)="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", 0x1000, 0x9}, {&(0x7f0000000300)="5592823d3d5b7666212e4228431939b757b33b01c0fb2483301cd1caa6478498f2877b34ab1c3190eafa5355c42a4e9d2c20447901", 0x35, 0x100}], 0x208408, &(0x7f0000000400)={[{@source={'source', 0x3d, 'taprio\x00'}}, {@flock_openafs='flock=openafs'}, {@flock_local='flock=local'}, {@flock_local='flock=local'}], [{@fowner_gt={'fowner>', r4}}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', r6}}]})
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000480)=0x4)

10:15:16 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r3, @in={{0x2, 0x0, @empty}}}, 0x9c)
get_thread_area(&(0x7f0000000180)={0x4, 0x20000800, 0x2000, 0x1, 0x2, 0x1, 0x1, 0x1})
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={<r4=>r3, 0x10001}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r4, 0x5}, 0x8)
fchdir(r0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0xffffffffffffff9b)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={r6, 0x3}, 0x8)
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
rt_sigaction(0x30, &(0x7f0000000300)={&(0x7f00000001c0)="f3400f1efc8fa9b0013ccec442212c93030000000f5c2d8b9600000f1b98ce830000c4a195f4b19989999943df803066bed8c4437d0480040000000f47aad8d6", 0x1, &(0x7f0000000240)="640feb4204430fe16a6cc4237d1d0d0000008009660f73f64442ddecc4e1a9e8815f000000c48139c691000000218b3666400f1b6200c4a15164850d000000c4c1e8568e74000000", {[0xfff]}}, &(0x7f00000004c0)={&(0x7f0000000400)="f2adf30f7e38c42135e9c7c482859897749f6a20c4a18df29d070000006665470fc74f0036640f3acc0effc483a96c359275148bf8c481785b800b000000c4617bf082b5dbdde3", 0x0, &(0x7f0000000480)="c4e11164db2e9ec4a1fb12ecc4e1785be9c4c1f45610f20faef526f6bac79ef6990f38002ec4c15dfa8c460500000026652e450f1b7a06"}, 0x8, &(0x7f0000000500))

[  594.221305][T20203] kAFS: unparsable volume name
10:15:16 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x24, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40}, 0x0, 0x402, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:16 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe1d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x48, 0x0, 0x0)

[  594.704228][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
10:15:17 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

10:15:17 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:17 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x21, 0x3, 0x80000000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x10}}]}, 0x34}}, 0x0)
bind(r1, &(0x7f00000004c0)=@l2={0x1f, 0x0, @any, 0x1f, 0x1}, 0x80)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r6, 0x0)
syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x7, &(0x7f0000000340)=[{&(0x7f00000000c0)="6b1a3d60bd819b2c57b2418b0fdeeaa09e4684fe5157e758f3e8559dc07ff88dba589649b69f8b8412e3212ee698410893c97ec99920c9ef4f43b03fe0f427001a16736bf9c1201c490614ca19897f87115289b5d9a84d63b59f77cae2df23fb680a869a069b5d42740fe2ad344b2c3be26befc65abf3e64edfd1f4b7d7907d3f2d66638a99913d4d488eeac58cf5d0d3a79689bd25845", 0x97, 0xcaf0}, {&(0x7f0000000180)="81847be428db0fe2dfaf61e533cf8509420c24f6351cfdb1fd1059c42a7f420b2018206849c0da015d661474e8fbf7dca8ce4fca4d0ef9e0e140d0b370cf4babaa1118088a6675739a6566c1cb3dd3d135aca485064495b553193fac81a996af50c88b61155baf04ed785d11e99ab17adf8baad29ddba7cf242c62b67b47516f5bf6ba76bcfb1cd4a74845d4e2a4", 0x8e, 0x3f}, {&(0x7f0000000240), 0x0, 0xce}, {&(0x7f0000000800)="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", 0x1000, 0x10001}, {&(0x7f0000000280)="80ce87749d846f2ac9cf647227d57b8ff35b643d5319f9f51b49f6960397bd358913fa9c8f514ca9fb7b9d472d4f28e11aac121d43de26ce61dd1d05a825cb7aa78a", 0x42, 0x1000}, {&(0x7f0000001800)="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", 0x1000, 0x9}, {&(0x7f0000000300)="5592823d3d5b7666212e4228431939b757b33b01c0fb2483301cd1caa6478498f2877b34ab1c3190eafa5355c42a4e9d2c20447901", 0x35, 0x100}], 0x208408, &(0x7f0000000400)={[{@source={'source', 0x3d, 'taprio\x00'}}, {@flock_openafs='flock=openafs'}, {@flock_local='flock=local'}, {@flock_local='flock=local'}], [{@fowner_gt={'fowner>', r4}}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', r6}}]})
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000480)=0x4)

10:15:17 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="00020200000001000000000000000690b7634657a6054e0604e5f0ffffff0000000000002f5f16ce227c9b5a768e66413ab8c169514cbbb7548d959f0e896efac2996f858b2ab6adf0d5bd5cf2bbfa0dbb1b4cc0dc92b8c83449df69395197c4ad56130286f361b7e37e7e896f89f141b9bb161502bc1610b0897bb29fbc6983131b79a8bc7914f5436841ed3aa49f38752ad78bcdbeb14fca2e1dcc44"], 0x18)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
fchdir(r3)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f00000002c0))
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x2)
ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/76, 0x4c})

10:15:17 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(r0, &(0x7f0000000240)='net/tcp\x00')
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
readv(r1, &(0x7f0000000400)=[{&(0x7f0000000300)=""/219, 0xdb}], 0x1)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
sendfile(r2, r1, 0x0, 0xedc0)

10:15:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x8040, 0x0)
accept$unix(r3, &(0x7f0000000080), &(0x7f00000001c0)=0x6e)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x844)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040090)
read$eventfd(r2, 0x0, 0x0)
ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000140)={0x3, 0x40, 0x4})
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r6 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x100000000)
syz_read_part_table(0x0, 0x2, &(0x7f00000011c0)=[{0x0, 0x0, 0x1c0}, {&(0x7f00000001c0)="5244534bcc537f2b", 0x8}])
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x1000000, &(0x7f00000000c0)='!\'!\x00')

10:15:17 executing program 1:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x9, 0x0, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x2}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'macsec0\x00', 0x1000})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x400, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140))
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x40000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x5)
readv(r2, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
prctl$PR_GET_FP_MODE(0x2e)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000100))

[  596.029478][T10863] tipc: TX() has been purged, node left!
10:15:17 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x6, 0x8, 0x3, {0x0, @raw_data="d939397d61bd2326941ef36074bb31e17da80e880aaab0b2d2edd3fb800484bf25ab8c0096cbb9796394868a864f62d69ddb6fbaae14a5a16372e0d12c78535650fe147d8003957121b405ac0776a8081377dd7d603c6369c251dc13ef34e1e4a4f6fe3c438736ada6becaca9fdfc6a976cec1e0757b292c4c09cb4802668b0cc1e34e13733704738838f715d0b607624ae9294141e8fdcdc18a70b403d23496f95fa29f63c2e676e17287acc081a9461a2505e3f7602f69b20ac52754c01d73a355cbcc82985a85"}, 0x5})
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000240)={0x80000001, 0x4, 0x7})
acct(&(0x7f0000000100)='./bus\x00')

10:15:18 executing program 4:
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
sched_setscheduler(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000100)=0x8)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x4, 0x3, 0x1, 0x0, '{'}}, 0x2a)
sched_getscheduler(0x0)
socket(0x10, 0x0, 0x0)

[  596.117227][T20255] kAFS: unparsable volume name
10:15:18 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="5a2d416a377297eb7d48b623cf4ae8ac9ebe003dd90c7293559677b4f624bc13bd6827519410e5ff939e1dac110c5703b3b88204e47649bb8a415ec12eb6415b968c16ae2886", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x28)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000240)=0x499897a6, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc0000000108010200000000000000000300000a2c0004800800014000000004080001400000006b080002400000000408d6240001400000000308000140000000020500030088000000050003003a0000001400048008000140fffff37a08000140000000050900010073797a30000000002c00048008000140134f33920800014000000005080002400000080008000240fffffb890800024000007fff0900010073797a31000000000900010073797a3100000000060002400805"], 0xbc}, 0x1, 0x0, 0x0, 0x2004c881}, 0x4)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@remote}}, 0x44)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0)
ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f00000003c0)="635a0a2bf89668f2c4d3661b2f0392cd4eefcc721f2b4285bde42195f1efbe8b9b10ce317c4e5984fd3ab6ba808fa41e5b2a7dc723d629780cb97ced32a51d573253a27cdd82ac3fb80e898101bd180c06eed16d525c573e0bf4702b3425ec86c8f846ccf836365e278ef841e3c63f3f761369be9dd1c7f76fcf618b16c61d8e2ad4e8261eda5f82336303ecf519f0972854a0d4eaf8ea0b3405172916fef893c483993987b4f10215877458e1849a36155735ff6feacb578da4dee0bf3ea84ce811a7582113c7c26331ae0810a169dbbf6be3c66ecb985c5bcb")

10:15:18 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

[  596.198644][T20266] device macsec0 left promiscuous mode
10:15:18 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x800, 0x800})

10:15:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
pidfd_open(0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000001c000000000000000000000000000000000000008000"}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206010300000000000000000000000005000400000000000900020073797a3100000000050001000600000005000500020000000c000780080013000000000016000300686173683a6e65742c706f72742c6e6574000000031f6247c79e54db3ddc9ce4a653a0212037fbcb95478df90349c6791fda385395598ae11e1a6ad0ef68426afc2cbf73d413b69cd6c76f182f28586bc8000017153af70a362f765913a337f5328c6123f749e267e675a3a49a9afa9df44e7b852897402aeb26dfd8151c888945a92655cdcc572a3e856f2097fd"], 0x5c}}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x3, @vbi={0x3ff, 0x80, 0x4, 0x30313953, [0xfc1, 0x1000], [0x8000], 0x13a}})
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x7ff})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r3, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x3, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r4, 0x0, 0x0)
write$P9_RLINK(r4, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7)
dup(0xffffffffffffffff)

[  596.387276][T20285] FAT-fs (loop5): bread failed, FSINFO block (sector = 1)
[  596.406295][T20279] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:18 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
sendto$l2tp(r0, &(0x7f0000000000)="66e2175402810919117fe21d4bfd3199a5a4b8762ebf417e7472e8630f82259be31a7dcb9e6336e18e3f5566bc33fcdc6a7cf6360ea6563e3b268eb95fcdbf9c79c97f13f740a15d789e924e5fd1021f139aa34ae7c4b61d18aff17310452e444f37", 0x62, 0x4000000, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102, 0x1}, 0x10)

10:15:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="bc7d6ecf00c067044485f274187e82fe8caf2dd58d88835d3f664532", @ANYRES64, @ANYRESOCT=r0, @ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x78)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VFIO_GET_API_VERSION(r2, 0x3b64)

10:15:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="000000fbff000000280012800a00010076786c616e00000018000280140016"], 0x3}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r9=>0x0})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r11, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e20, 0x3, 0x2, 0x80, 0x0, 0x88, r9, r11}, {0x81, 0x5, 0x4, 0x81, 0x9, 0x7f, 0x200, 0xfffffffffffffff7}, {0x3, 0x6, 0xae26, 0xcde9}, 0xad8, 0x6e6bbf, 0x1, 0x0, 0x2}, {{@in=@multicast1, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x2, 0x1, 0x9, 0x0, 0x17, 0x8}}, 0xe8)
r12 = dup3(r5, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0)

10:15:18 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r3, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='%\x00', &(0x7f0000000080)="fa1afc6e92587a66a81c74521bb8ce416be259536c373fcb2fd587d7df51eb6fc123b5ad5a4df453a6164dd19f9ebefa3a24710cee363088374bc5dcc96d4b1dd3217bd2e15543f63126a7fffd687cccd4d9d8e6f547e0a30a6624a1508e4f9bb65e37deadf2b65f7403416f16ea541513aff81a3d702bb81be07f5483b07208a2f3c435f185411d12a667caa9be38616e8843b1cfaa64", 0x97)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d00"/20, @ANYRES32=r6, @ANYBLOB="0000ff000a0002"], 0x28}}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10:15:18 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x65, 0x6, 0x5, 0xa, 0x4, 0x81})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x101)
fchdir(r0)

10:15:19 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:19 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000202000000003f00"/24], 0x18)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]})

[  597.358507][T20338] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:21 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)

10:15:21 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mq_notify(r1, &(0x7f0000000140)={0x0, 0x38, 0x0, @thr={&(0x7f0000000300)="418b6f12da29737a3c65607f238eb7bb7cb44e20dc240a9c04a1e85f99c2ba41875cb5ea79040eafca7eaad1c2f45a2f98eb9847f739fb298016f622141a75694cc930c0b4be6480ca9ef03775cc074802dd6de60d8211fb9b13548a207c7405ab192896006e9724f29a49a21030b1e6", &(0x7f0000000040)="5cb1ab34d557e3a8e036350b73be794199a8955ea673be6f"}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0174000000000000240012000c000100627269646765"], 0x44}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0)

10:15:21 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x880001, 0x88)
fchdir(r0)
prctl$PR_SVE_GET_VL(0x33, 0x17c)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={<r1=>0x0, 0x8, 0x30, 0x800, 0x1}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0xc, 0x7f, 0x80000001, r1}, &(0x7f0000000100)=0x10)

10:15:21 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_names\x00')
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendfile(r4, r3, 0x0, 0x283)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r6 = accept(r5, 0x0, &(0x7f0000000140))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r8, 0x7, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}]}, 0x20}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r8, 0x30, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd60f2c7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4eab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4cd0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}]}]}, 0xf4}}, 0x6)
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000340))

10:15:21 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpgid(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000480)={0x0, 0xffffff18, 0x8001, 0x0, 0x6})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000440)={0x0, 0x2, [@broadcast, @dev={[], 0x23}]})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r3, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aaf50c71a900efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83dd7770e5485b3580e6c37cdf78ebabc56f554ff14196fa347774c415acdeb046e3cf8a5afb70f638ef519604604bdd8af70dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce652179a6f2fbcded42fa3aa"], 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r0}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)
syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask'}}, {@case_sensitive_no='case_sensitive=no'}, {@show_sys_files_yes='show_sys_files=yes'}, {@nls={'nls', 0x3d, 'ascii'}}, {@disable_sparse_yes='disable_sparse=yes'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@fmask={'fmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_remount='errors=remount-ro'}, {@nls={'nls', 0x3d, 'cp1255'}}]})
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  600.211236][T20378] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  600.301900][T20384] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
[  600.329889][T20378] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  600.449191][T20396] device bridge1 entered promiscuous mode
10:15:22 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00')
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000640)={0x1, {&(0x7f0000000480)=""/218, 0xda, &(0x7f0000000580)=""/135, 0x1, 0x3}}, 0x48)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000)
setgid(0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010007000000000002000400", @ANYRES32=0x0, @ANYBLOB="040006000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1000010000000000200000020000000401fba1f0f7a87ff99195dad2bc636edfbfb2619bd9fde107195f076f466b847f09d9197e3debaa6bc6624af0270f4caa5b44981e860ab816c047891c0181fe156b4564c4b1fd9d1edde6dc13b8304538a5"], 0x54, 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

10:15:22 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
socket$bt_cmtp(0x1f, 0x3, 0x5)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[<r2=>0x0, 0x0]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x28c, 0x0, 0xc8, 0xc8, 0x0, 0xc8, 0x1c4, 0x1a0, 0x1a0, 0x1c4, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ipv6={@private1, @loopback, [], [], 'bond_slave_1\x00', 'ip6_vti0\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2e8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000040)=[0x0], 0x1, 0x800, r2, r3})
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000040)=[0x9], 0x1, 0x0, r2, r6})

10:15:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x77, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r6, 0x1ff}, 0x8)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000100)=0x7, 0x4)

[  600.491874][T20400] ntfs: (device loop4): parse_options(): NLS character set cp12 not found. Using previous one macturkish.
[  600.503420][T20400] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  600.515123][T20400] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size.
10:15:22 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="fb13842a0002020000000000fc01ee000000000000000000"], 0x18)
r4 = accept4$tipc(r3, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x80000)
fchdir(r4)

[  600.609984][T20400] device bridge2 entered promiscuous mode
[  600.665289][T20400] ntfs: (device loop4): parse_options(): NLS character set cp12 not found. Using previous one macturkish.
[  600.676798][T20400] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  600.700062][T20400] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size.
[  600.755660][T20404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
10:15:22 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@acquire={0x134, 0x17, 0x7, 0x0, 0x0, {{@in6=@dev}, @in6=@private0, {@in6=@mcast2, @in=@local}, {{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@sec_ctx={0xc, 0x8, {0x49}}]}, 0x134}, 0x8}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x3c, r3, 0x85b, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "210ab2ff0d839e000100000000000059f9d52d12f2122d3e540dbd6736b253977a35c268"}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008854}, 0x40)

10:15:22 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x28}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f0, 0x0)

10:15:22 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
acct(&(0x7f0000000100)='./bus\x00')

10:15:22 executing program 1:
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="311a74b9367aaaaaaaaaaabb08004500005c0000000000019078ac1e0001ac1414aa050090787f000001400000000000000000000000ac1e0001ac1414008628000000000012b313e21988003cc3c33ce6f163ee3d0e001005d252bc71ea7bee3f0bd4454cd500000000b408c0e4e99ddc5a61e91e5df0a4e8f9810c84316349cda552e42a8812d06b09f873503c67fbbad24bfb993326a9882c6e4e8b46f8e4212de2ccf2822316efe30e326d"], 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000000c0))

10:15:22 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)

10:15:22 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100), 0xfffffffffffffea4}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)
syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a100000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}])

10:15:23 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  601.213729][T20453] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:23 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2e0, 0x198, 0x0, 0x198, 0x0, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffff000}}}}, 0x340)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[{0x227e, 0x40, 0x9, 0x8000}, {0x3f, 0x7, 0x0, 0x4}, {0xb, 0x66, 0x3f, 0x4}, {0x0, 0x6, 0x0, 0x8}, {0x4, 0x3, 0x7f, 0x80000000}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x6)
dup3(r2, r3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r6, 0x0, 0x0)
ioctl$NBD_DO_IT(r6, 0xab03)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
syz_open_pts(0xffffffffffffffff, 0x20040)

10:15:23 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x14002, 0x0)
socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
write$nbd(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080))
syz_open_dev$audion(0x0, 0x3, 0x1c1083)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000380), &(0x7f0000000440)=0x4)
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {0x8, 0x6}, {}, {}, {}]}, 0x5c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

10:15:23 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="000202000000004571254000fc010000000000000000000000000000b22960882d16e3d8c793c7bdc811a3e24625dc0b34f8427c47600a3d13ec878031cd5d447a775c6328d0b3f7700a2adb5ee799f93afd50"], 0x18)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="8d723e00009600001b0000000000000000040000000045fa"], 0x18)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={<r3=>0x0, 0xffff}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @multicast1}}, 0x4}, &(0x7f0000000380)=0x90)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}]})
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r4, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/45, 0x8}, {&(0x7f0000000100)=""/5, 0x5}, {0x0}], 0x3)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19140, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000000}, 0x0, 0x0, r4, 0x0)
utime(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x9, 0xffffffff})
acct(&(0x7f0000000100)='./bus\x00')

10:15:23 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4)
fchdir(r0)

[  601.539273][T20465]  loop4: p2 < > p3 p4
[  601.641768][T20465] loop4: p3 size 1912633224 extends beyond EOD, truncated
10:15:23 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2e0, 0x198, 0x0, 0x198, 0x0, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffff000}}}}, 0x340)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[{0x227e, 0x40, 0x9, 0x8000}, {0x3f, 0x7, 0x0, 0x4}, {0xb, 0x66, 0x3f, 0x4}, {0x0, 0x6, 0x0, 0x8}, {0x4, 0x3, 0x7f, 0x80000000}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x6)
dup3(r2, r3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r6, 0x0, 0x0)
ioctl$NBD_DO_IT(r6, 0xab03)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
syz_open_pts(0xffffffffffffffff, 0x20040)

10:15:23 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x80000)
write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0x0, 0x6, {0x2, 0x4, 0xb7, 0xfffffffc}}, 0x20)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$RTC_PIE_OFF(r4, 0x7006)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000180))

[  601.774950][T20465] loop4: p4 size 3657465856 extends beyond EOD, truncated
10:15:23 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r1, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)

[  601.997999][T20492] overlayfs: filesystem on './file0' not supported as upperdir
10:15:24 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)

10:15:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100), 0xfffffffffffffea4}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)
syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a100000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}])

10:15:24 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x14002, 0x0)
socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
write$nbd(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080))
syz_open_dev$audion(0x0, 0x3, 0x1c1083)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000380), &(0x7f0000000440)=0x4)
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {0x8, 0x6}, {}, {}, {}]}, 0x5c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

10:15:24 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2e0, 0x198, 0x0, 0x198, 0x0, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffff000}}}}, 0x340)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[{0x227e, 0x40, 0x9, 0x8000}, {0x3f, 0x7, 0x0, 0x4}, {0xb, 0x66, 0x3f, 0x4}, {0x0, 0x6, 0x0, 0x8}, {0x4, 0x3, 0x7f, 0x80000000}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x6)
dup3(r2, r3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r6, 0x0, 0x0)
ioctl$NBD_DO_IT(r6, 0xab03)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
syz_open_pts(0xffffffffffffffff, 0x20040)

10:15:24 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x1cd481, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000240)={0xd, 0xa, 0x11, 0x19, 0x8, 0x6, 0x3, 0x0, 0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './bus', [{0x20, '/proc/timer_list\x00'}, {}, {}, {0x20, '*#+%@'}, {}, {0x20, '/proc/timer_list\x00'}, {0x20, '/dev/sequencer2\x00'}], 0xa, "c126e9038dfcbea5486ed49b3961a0fcdc65907f617b03dcdefff1777e68"}, 0x65)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
futex(&(0x7f0000000040)=0x2, 0x86, 0x2, &(0x7f0000000180)={r2, r3+60000000}, &(0x7f00000001c0), 0x1)

10:15:24 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x135000, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r0, r2, 0x1d, 0x1, r3}, 0x14)

10:15:24 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1840050, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000040))
fchdir(r0)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x80)

10:15:24 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x1cd481, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000240)={0xd, 0xa, 0x11, 0x19, 0x8, 0x6, 0x3, 0x0, 0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './bus', [{0x20, '/proc/timer_list\x00'}, {}, {}, {0x20, '*#+%@'}, {}, {0x20, '/proc/timer_list\x00'}, {0x20, '/dev/sequencer2\x00'}], 0xa, "c126e9038dfcbea5486ed49b3961a0fcdc65907f617b03dcdefff1777e68"}, 0x65)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
futex(&(0x7f0000000040)=0x2, 0x86, 0x2, &(0x7f0000000180)={r2, r3+60000000}, &(0x7f00000001c0), 0x1)

10:15:24 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000340))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0)
getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
r9 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r9, 0x29, 0x36, &(0x7f0000000400)=@routing={0x89, 0x4, 0x0, 0x0, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @empty]}, 0x28)
splice(r9, &(0x7f0000000280)=0x1000, r5, &(0x7f00000002c0)=0xffffffffffffffff, 0x6, 0xa)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_getlink={0x50, 0x12, 0x4, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r7, 0x48, 0x42}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3f}, @IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x3f}]}, 0x50}}, 0x0)

[  602.879960][T20547]  loop4: p2 < > p3 p4
10:15:24 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:24 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r1, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)

[  603.024472][T20547] loop4: p3 size 1912633224 extends beyond EOD, truncated
10:15:24 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x400200, 0x0)
fchdir(r0)
r1 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
recvfrom(r1, &(0x7f0000000000)=""/193, 0xc1, 0x40, &(0x7f0000000100)=@generic={0x21, "e55987e5d9becbf3c794f7072416b963ddbb6b4883367c5e1cfcf934888d8a54c18866f28d823e49c745216aa56ae79cee66295db8aa3074a82b34e37e2cf4b8c5e12d2de10687c062e17ee205d1c9925788940a6bdc7eecbdc51b864282d0f132c4d07464693403266c6a8b67da8b28a5ed787c8b82922353cf7e9eb9a3"}, 0x80)

[  603.108583][T20547] loop4: p4 size 3657465856 extends beyond EOD, truncated
10:15:25 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f00000002c0))
r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5, 0x0, 0x8, 0x7, 0x0, 0x7fffffff, 0x24000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x3}, 0x400, 0xfff8000000000000, 0x3, 0x3, 0xfffffffffffffffa, 0x200, 0xbf0}, r4, 0xe, 0xffffffffffffffff, 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x6e)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r9, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x844)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r9, 0x424, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_EVENT={0x8, 0x2c, 0x9}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0xff}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x54}}, 0x0)

10:15:25 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\r\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="f7ff0000000000000e00000007000100667700005c00020058000400540001000b00010073696d706c650000280002800c0003007463696e64657800180002000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000060005000000000008000b0000000080"], 0xd4c}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r4, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0)

10:15:25 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendto$x25(r0, &(0x7f0000000040)="1b", 0x1, 0x800, &(0x7f0000000140)={0x9, @remote={[], 0x1}}, 0x12)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:25 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:25 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:25 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  603.668374][T20616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  603.699700][T20623] netlink: 3252 bytes leftover after parsing attributes in process `syz-executor.4'.
[  603.732329][T20623] netlink: 3252 bytes leftover after parsing attributes in process `syz-executor.4'.
10:15:25 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x220043, 0xc9)
fchdir(r0)

10:15:25 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, r1, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)

[  603.850678][T20623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
10:15:25 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xf56da523c2528e3b, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'bond_slave_0\x00', {0x2, 0x4e22, @rand_addr=0x64010100}})
acct(&(0x7f0000000100)='./bus\x00')

10:15:25 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  603.903024][T20642] netlink: 3252 bytes leftover after parsing attributes in process `syz-executor.4'.
[  603.929933][T20642] netlink: 3252 bytes leftover after parsing attributes in process `syz-executor.4'.
10:15:25 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000280)=ANY=[@ANYBLOB="51c33f886e6dd330e4704d9e316eaf3af5b4db8c56f5e55ae7acd66f91b10af27ef97290dc7c693a73253ff752ca4f2b37500fcead39fae972c34bff1cf2c322d6c9682c05e8e349f52d7e44be26293dc000a88cb303b4628307f234241a11f9fc81040c8006499a15733d24c1fc5b654101bc987130518dabd59f5914b556fe78e4bd4fcd2e"], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d39682f5e78"}]}, 0x20}}, 0x0)
ioctl$BLKPG(0xffffffffffffffff, 0x40140921, &(0x7f0000001200)={0x0, 0x0, 0x60, 0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32, @ANYBLOB="08000a40c63e8059f7696f0b2797f37c04eda13ab8043a91e911165578799fbb76e956f546d57fd037b56ffde692907d43c82bdd4cf1a24b37c189acc3f31343a6e94e65283f949934d8db57c95af14c47", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f000000a980)={'team0\x00'})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000af80)={&(0x7f0000001240)=ANY=[@ANYBLOB="c0051600", @ANYRES16=0x0, @ANYBLOB="000a2abd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d3d617070696e670000000000000500030003000000080004", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000008008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000003000000080004000000700008000100000000", @ANYRES32=0x0, @ANYBLOB="c4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b40002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040040000100240001006c625f74785f686173685f746f5f706f72c9d736b03e3055f4b59ae14d378a745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="b40002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140202803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000000100"], 0x5c0}}, 0x0)

10:15:25 executing program 4:
r0 = getpgid(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000340)=""/182)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockname$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x9, r4, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0)

10:15:26 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x820c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x68a002, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78)

10:15:26 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)

10:15:26 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x29, "be3c236a9ddf4678d7008188f9ea1c0986a0c1bca1cfe553af8f88d2e74a15e201a6f7a928199bace9"}, &(0x7f0000000080)=0x4d)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/42)
fchdir(r0)
getsockname$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x10)

[  604.133880][T20662] device bridge3 entered promiscuous mode
[  604.161503][T20662] device bridge_slave_0 left promiscuous mode
[  604.169823][T20662] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.218824][T20662] bridge3: port 1(bridge_slave_0) entered blocking state
[  604.231800][T20662] bridge3: port 1(bridge_slave_0) entered disabled state
10:15:26 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xaf8, 0x80c40)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x10000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  604.260391][T20662] device bridge_slave_0 entered promiscuous mode
[  604.294641][T20662] bridge3: port 1(bridge_slave_0) entered blocking state
[  604.301889][T20662] bridge3: port 1(bridge_slave_0) entered forwarding state
10:15:26 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])

10:15:26 executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)

10:15:26 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  604.695341][T20679] FAT-fs (loop5): bogus number of reserved sectors
[  604.718365][T20679] FAT-fs (loop5): Can't find a valid FAT filesystem
10:15:26 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:26 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])

10:15:26 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/41)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
getpriority(0x1, r2)
ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000040))
fchdir(r1)

10:15:26 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4444}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:26 executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)

10:15:26 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)

10:15:26 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x9000}, @val={0x1, 0x1, 0x6, 0x6, 0x6, 0x7}, @x25={0x0, 0xbe, 0x13, "6216610d4164af89b0836b49e7ace403b39affef625cf79a2a7e4b0a8552ae8101d064187dab1a0d9a8b9432194dbed8364d6b31531656ea78863ea3b25d07e1f4cc42db435ec810404afb18cb46572790dda14e419a43767b48bf04769784f8b170d1eb8e83741a0d7ed43489d5a8b1c6ed0a9a2d79b81706041861b3eaa4d9b68ac7f36f8270be00a26eb3dd031201b3ed8a55ab9f9f36711326ed6023cf229a991abb36051ad90fb3e79240876ec378d28cf35749f502df3d4aac955b037f0c524c2d62c36643aa7c1815907aeef6bce0d8bbc59994c710c7f7c56d2cf7cf6734911b15dc43d37ad13b27bb49522607eeaceef19ff21ab145635ab8b630731d15a0f5f9feffb74938b98a8a40c6943ec10ee6e4e3a9c38227a1c34b0b49dd90f5eedfedc19a85c0423897eb7336282716cf5321531287b9042132a35881bde8f35c046f794fea6354a69d82b532d7741792591c883490ce83567ebba5d34ef11f7221df27786f1c770255d1d8336ad28698cc53e9450f652cd113d402e2f8180000000000000000"}}, 0x19a)

10:15:26 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])

10:15:26 executing program 4:
mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x5a)
mount$bpf(0x0, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0, 0x80800, 0x0)
mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001009, 0x0)
mount$bpf(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', 0x0, 0x5004, 0x0)
pivot_root(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0/file0\x00')
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40100, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000200)={0x59, 0x1, 0xfffffff8, 0x80, 0x0, 0x1ff, 0x2})

10:15:26 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)

10:15:26 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xec, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x7)
acct(&(0x7f0000000100)='./bus\x00')

10:15:26 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @loopback}, {0x306, @broadcast}, 0x40, {0x2, 0x4e21, @multicast2}, 'macsec0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000240)=@dstopts={0x16, 0x1b, [], [@calipso={0x7, 0x40, {0x2, 0xe, 0xec, 0x1ff, [0x0, 0x4, 0x0, 0x0, 0xa4f, 0x1, 0x6]}}, @generic={0x96, 0x71, "931ff14309ce9cdc75b3dc2900113dd588e96c7fdb93dc876d02f036ae5c56b56732cd45d8d903f96359c483eaf789a38b7f1a2f3c0db0d212d49d24c29a04ff2d2f2868c2bc59b9d5687dd10c6f25db5db571e9caffcc94ce9e3407f0e3a1aa6724745318387316a8507854e8dca9fe38"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @hao={0xc9, 0x10, @mcast2}, @pad1, @pad1]}, 0xe8)
recvmmsg(r0, &(0x7f0000000000), 0x0, 0x121, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00')
preadv(r2, &(0x7f00000017c0), 0x315, 0x0)

10:15:27 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:27 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = socket(0x23, 0x80002, 0x80000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = accept$unix(r0, 0x0, &(0x7f0000000040))
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x2, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x10}, 0x2c)
fcntl$setsig(r1, 0xa, 0x35)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:27 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x181, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f00000002c0)=""/39, &(0x7f0000000380)=0x27)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r3, &(0x7f0000000140))
dup3(r1, r2, 0x0)

10:15:27 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = semget$private(0x0, 0x207, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)

10:15:27 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000080)={0x2, 0xcb, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x114000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0xc004, 0xffffffffffffffff, 0x2, 0x0, 0x3}, r2, 0x0, 0xffffffffffffffff, 0xb0d87164f772d39a)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x2, 0x1, {0xc, @sdr={0x31363553, 0x4}}, 0x3})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
fadvise64(r3, 0x2, 0x3, 0x1)
acct(&(0x7f0000000100)='./bus\x00')
r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x7, 0x200040)
ioctl$TCSBRKP(r4, 0x5425, 0x3)

10:15:27 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001640)='/dev/vim2m\x00', 0x2, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r7 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
sendmmsg$unix(r1, &(0x7f00000018c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000180)="461dd440eaa80f1ba7ad31f7abdf01d4e29a9ac375677d70a4e4df4bd43ae006dc4f20222cd1d5a936238bd4591e49f0c05c8053f7ed4d5cea5b6b40408fc94ec7c88eca8d96fc2fdd1432e9a2a7f9730361e42f5a4e8c72bb7b594449d39c9422d20766939e7021d4521f7d9630db569ea06353d9feac4eb76fa71687", 0x7d}, {&(0x7f0000000200)="770bdf53a0f36a6abcae135424b934e72d569ab87c264774f6d6a429b5f93ab075b0edf15ef9c58f398c33b771024e16ff1e33136593296b92dee0c0b1d00e1d7463d476d933d5fa035071f3b713b088779cbcb5d1f6ebaa89bbfe792f16d798f01356991b0671776d406f6d43b12440078e5dcdf270eeac184941e4c0550f54a199d227b9aabd7081aaceb1884dc758e861f177b816fccad5cce2209a1d7e10768c354bae5954ffdb8720d3a2789412694dd4221b14ef35f328d7882c908128cbdd4a3691e93e72906fca", 0xcb}], 0x2, 0x0, 0x0, 0x800}, {&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="d6a6f8e0f97b23dba5fd67fcdf7a794dad747f8dcd85566b76c118c83b6e1c1dd860c354c9c85a2990841a20683816e994979cb6c54242a6f0804ed8fd55a7a8786ac2daa35c125cb1ec79e40e68b53fee53b07e0e60a601071e0a1a28c8a162008443043b1d6985293cdb99a0fc9f78cdf46678d8caf0b1de31e2621196c892c78529e46fc0b9cd173796c9ca20c7b31a7ba0aa88fc77e11cfa664aae3c51be2c94d142c2957d33dcd315e955c6dbe95597de64540b00e81e767b72e39aa39a22a99fcb1b40b763d3384ab3bb6b09f474e13d8514718e3e93b82df118813af28b", 0xe1}], 0x1, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0, 0x40000}, {&(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="1614961c36ef70b9f7b5b5426a137314da71b13d9e41bfda1875f09664f3be1225411f45ea53026e0ede5ac2501efc3d8d54254b14c40e5ace15d0c6a027f01305aed164064884e22696590fd68ddfd238366e8f6175bc9cbe12a16ce94c7e724b8274fcf643f1ebbeee606ce21cfb00790d8bf5f2b77680d17bb8ac780257c6bede51828b158aac6edd35d246692fcf91ad98adb276163082b2ec4429ba0f5bb9d53115", 0xa4}, {&(0x7f0000000e80)="a0ecd5cac6db2e0debdc4fb9d9403650151ff5c80d2321b5f39074be62bae50b9819e576d68bdd59de1154aa3d9fa2", 0x2f}], 0x2, &(0x7f0000000f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x40015}, {&(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000001000)="aca93c3dfe6921ee0631a2d600de56f3c61d561037062b6014fd7fe1a755f4dec2d0f46000d0f5f6c6942a60b965976f19624fafdada4fdb6dd337501f72e9c7cab98f55bbc0e7f63d8c24748f7914aee3fa55872a56d2c0bf14b0bcf155c2de1b338076bc9d7317b97dc719a23a03064c8bbe047ee5de25cd137f6de6c660877cc2e97e0ef004762a4ebe999a544477ccb371301b22f6ad2411646b7fc38225ab1b1867ff897f326e", 0xa9}], 0x1, &(0x7f0000001480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0xb8, 0x4008850}, {&(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0), 0x0, &(0x7f0000001680)=[@rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r4, r0, r5]}}], 0x70, 0x44004}, {&(0x7f0000001700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001780)="276469e27813c67d6a7f670c105c751cb6c85d2843bb95c7c57677111c650bedeb090a16790b8c10a0f9f4a3c33a81eb084308dcb7c88d6f73eb0c671ed7ed9530b834423761de38f2e8b4ada16bcc092c577d99426be789cc1bc85bf79954c73c845bbd228193909f7fc51386b2f2ad0a7481d61dae7f7ab896b7dc0e422feae6a86de228ce19e082819c803001ed48e512d8a911bc7bf0537b896cde6becafa69d101c4726da743395cc2430344e4f3d73a40923", 0xb5}], 0x1, &(0x7f0000001880)=[@rights={{0x24, 0x1, 0x1, [r1, r6, r1, r9, 0xffffffffffffffff]}}], 0x28, 0x4000001}], 0x6, 0x20008811)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080), 0x4)

10:15:27 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000000)={0x0, 0x3ff, 0xd})
fchdir(r0)

10:15:28 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:28 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x181, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f00000002c0)=""/39, &(0x7f0000000380)=0x27)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r3, &(0x7f0000000140))
dup3(r1, r2, 0x0)

10:15:28 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
r4 = epoll_create(0x80)
r5 = fcntl$dupfd(r3, 0x0, r4)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, 0x7, 0x4, [@bcast, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast]})

10:15:28 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x9, 0x0, 0x0, 0x800, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)

10:15:28 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:28 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:28 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r6], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:15:28 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:28 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="000202050055c9c9000000fc01000000000000000fba0000000000"], 0x18)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000040))

10:15:28 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:28 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet6(0xa, 0x5, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x200, 0x0, 0x200, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000a5079d8241cda5ac60ea48a80ea107652d7c36fd7c00"/39, @ANYRES32=r5, @ANYBLOB="0000000000000000200012000c00010076657468"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x0, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='e\x00\x00\x00\x00\x00\x00\x00\x00\t', @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800b0001006970766c616e000004000280080005", @ANYRES32], 0x44}}, 0x20008005)
r8 = socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000639807fb1458f2a02e000011000d040000003b7492df78dd6a811c76601c20870b997c93f85b3babda787a1de91746592492d19ebf6ada3890f6deca309e67d50a6328ee872e51b7f872a3ec2d4f920751f2b34e329983b233b6b9", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x7}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)

10:15:28 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
socket$unix(0x1, 0x1, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x2000082)
fchdir(r1)

10:15:28 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7587, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040))
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x7fff, 0xa669, 0x1009, 0x1, 0x4, 0x1, 0x0, 0x6}})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
connect$nfc_raw(r3, &(0x7f0000000140)={0x27, 0x1, 0x1, 0x4}, 0x10)

10:15:28 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:28 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:28 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3fffffc, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="584653420000060000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r0=>0x0}, 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200", @ANYRES32=r0, @ANYBLOB='\b\x00\x00'], 0x34, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x77, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=<r6=>r5, @ANYBLOB="42000000919bc6a4593b6550e4c65163b651d270ff9b14d573aa3842fcd33421f8afcd51bbeb68327020cd753db9eada7a668a083f528ad2b9ae334a3d82b72e5a58d638a8bf"], &(0x7f0000000280)=0x4a)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r6, 0x9, 0x4, 0x7, 0x5, 0x8001}, 0x14)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)

10:15:29 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="0bd99d04", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'macvtap0\x00', {0x80}, 0xf73})
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r3)
set_thread_area(&(0x7f0000000040)={0x1b, 0x20000800, 0x1000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1})
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)

[  607.229477][T20872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  607.289375][ T2592] XFS (loop4): SB sanity check failed
[  607.295056][ T2592] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x388/0x480, xfs_sb block 0xffffffffffffffff 
[  607.325203][T20872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  607.327126][ T2592] XFS (loop4): Unmount and run xfs_repair
[  607.362589][ T2592] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  607.370780][ T2592] 00000000: 58 46 53 42 00 00 06 00 00 00 00 00 00 00 10 00  XFSB............
[  607.397074][ T2592] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  607.405992][ T2592] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19  4.....H..&...O\.
[  607.432585][ T2592] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88  ................
10:15:29 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f00000000c0)={{{0x5, 0x1}}, 0x3f, 0x8, &(0x7f0000000080)="c237ab7bc74d510a9cf2e4a7ce69c338c523247116ec60ec9541ce11dfc71a8979d225e2dcc54a1073275f98810731e2491b59c4aa25e2efe7853f4b76605e"})
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:29 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:29 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @bcast, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0xfffffffb)
acct(&(0x7f0000000100)='./bus\x00')

10:15:29 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:29 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x464, 0x300, 0x70bd27, 0x25dfdbfb, "de402036d3b454fc5b11cbc8ce557c7128bad2534edfe2659050ebc3b6ba6d201cf87a4784c215da3194f9b8679d2f80ac06935ebc1b90321e1b6e248be6e428d83c9a08d69f783205b98b956557001f0c91fce4719c19ec6f53aa49e7990d5d21db6d6dbe49349002b601d2062355c7f492a4acec61b3dd523769772d955e50", ["", "", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x240080c5}, 0x40010)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010009090002040003800ca52eb4f7000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x20048055}, 0x2400c854)
r7 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020280000000000100000000000000ff00000000000000"], 0x18)
r8 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)="f680ce75a0238dec7c5c6844d566490df69c2a275a7addc3aa7ffb574f8b9ef09d4ab3862b0eb2db76df24be57542e8f0a508b212fc5bf3113b45040ad8a44290acbdf62371de8cfe6068de0e17b4ba4f189d965e53dc030f45536384fa348676c4dc7d5bf83a2d1061f04cea49cadcf6314b769ee74cb2384729542341f50ff8caec42be4905fcf61ba40f888b5c2ee9d8faca94a524011c2d32ab26b6ffc78d0378b822194f66bb2f9f9eef20db19e9c29a838b9e02aec7b3076a06ffebc89dfae", 0xc2}, {&(0x7f0000000240)="5215184a97848b99badc433e4f2cec5a4e63000dfbf2375ed61c4402d99f87396fc32d8600f4369e42b82eafcf26f3acfcafafc0f0f3db810da5733a357ace69642279b3c92ad27da723d63cbd15", 0x4e}, {&(0x7f0000000400)="72d203cf", 0x4}, {&(0x7f0000000440)="366e29f767e7ff8e916c4b4aeb74e6e9d37b99d44c45a46da4254bffbcd086dc4baafd7ea091be65b252921fc67bc59d4ab849bf32e0616a1a08ea661fc5a57a5396e4238644438ad3e05289057b6525c1e16bc1e1bae7fb0f408c8984", 0x5d}], 0x4, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r0, r6, r0, r7]}}, @rights={{0x18, 0x1, 0x1, [r10, r0]}}], 0x48, 0x2000c110}, 0x4000)

[  607.457509][ T2592] 00000040: 00 00 00 00 40 00 0d 89 00 00 00 00 00 00 0d 8a  ....@...........
[  607.477207][ T2592] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  607.497180][ T2592] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00  ...Z.$..........
[  607.537078][ T2592] 00000070: 00 00 00 00 00 ec 00 00 0c 09 0a 02 0c 00 00 00  ................
[  607.590129][T20869] XFS (loop4): SB validate failed with error -117.
10:15:29 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xe8f, 0x12, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x9c0000, 0x42f3, 0xdafb, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980911, 0x0, [], @p_u16=&(0x7f0000000000)=0xf1c5}})
ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000100)=""/160)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0xbd6, 0x1, 0x4, 0x1, 0x27f6, {0x77359400}, {0x4, 0x0, 0xfa, 0xff, 0x81, 0x77, "9c519470"}, 0x8, 0x1, @offset=0x6, 0x8})
syz_usb_control_io(r2, 0x0, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRESHEX=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000240)=ANY=[@ANYRES64=r5], 0x0}, 0x0)

10:15:29 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  607.716169][T20899] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
[  607.760702][T20901] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  607.791617][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
10:15:29 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:29 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2e043, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e20, 0xad, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7d}}, 0x5, 0x8, 0x1, 0x2, 0x3}, &(0x7f0000000140)=0x98)
r5 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, 0x0, 0x0)

[  607.935025][T20921] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
10:15:29 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  608.005112][T20921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  608.027006][ T2512] usb 6-1: new high-speed USB device number 25 using dummy_hcd
10:15:29 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0xa00000, 0x9666, 0x3, <r4=>r3, 0x0, &(0x7f0000000040)={0x990901, 0x7b7b, [], @ptr=0x9}})
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x13, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c055}, 0x40)
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x400000, 0x0)

10:15:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = dup3(r0, r1, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x8400ae8e, &(0x7f00000000c0)={0x0, 0x0, [0x4c000000, 0x0, 0x3, 0x8, 0xfdfdffff]})
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @loopback}, 0x5, 0x0, 0x0, 0x0, 0xced2, &(0x7f0000000080)='veth1_to_bond\x00', 0x5, 0x6, 0xc90})
dup2(r5, r4)

[  608.328527][T20937] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer.
10:15:30 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

[  608.417418][ T2512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.440728][ T2512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
10:15:30 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x101, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0)

10:15:30 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  608.471463][ T2512] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40
[  608.500976][ T2512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.545155][ T2512] usb 6-1: config 0 descriptor??
10:15:30 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  608.600698][T20952] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:30 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080))
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xecc}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x600000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x94e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
recvfrom$l2tp(r2, &(0x7f0000000000)=""/103, 0x67, 0x40010002, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

[  608.927141][ T2512] usbhid 6-1:0.0: can't add hid device: -71
[  608.938315][ T2512] usbhid: probe of 6-1:0.0 failed with error -71
[  608.976072][ T2512] usb 6-1: USB disconnect, device number 25
[  609.507010][ T2512] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  609.897232][ T2512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  609.927250][ T2512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  609.949443][ T2512] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40
[  609.969713][ T2512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.995702][ T2512] usb 6-1: config 0 descriptor??
[  610.736983][ T2512] usbhid 6-1:0.0: can't add hid device: -71
[  610.744211][ T2512] usbhid: probe of 6-1:0.0 failed with error -71
[  610.804745][ T2512] usb 6-1: USB disconnect, device number 26
[  611.456711][ T2512] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  611.846877][ T2512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.890650][ T2512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.927756][ T2512] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40
[  611.957049][ T2512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.973172][ T2512] usb 6-1: config 0 descriptor??
10:15:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x84}, 0x50800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000240)=@ipx, 0x80, 0x0}, 0x3}, {{&(0x7f0000000500)=@ipx, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000007c0)=""/153, 0x99}, 0x10008}, {{&(0x7f0000000600)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000940)=""/233, 0xe9}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000002040)=""/4090, 0xffa}, {&(0x7f0000000c00)=""/156, 0x9c}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, &(0x7f0000000e00)=""/84, 0x54}, 0x6}], 0x3, 0x3, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003040)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000003400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000ffff0001000f00008dbfa4e82b3ca2db228a040b02ba2ff7f0ebb2b7b013d9143b6aaf6dfbfc619ce8e6b7b32420000000d8ff"], 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'})
fcntl$getown(r0, 0x9)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000002c0)=0x3)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x200400, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r2 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0)

10:15:34 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:34 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:34 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
fchdir(r0)

10:15:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffffa}]})
pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000002c0)="8411ac9e95b2a6801dfcf6d8fe5dabe0046e2168c0e68c05000000b66283f66571e754ec3ed52dad078b6adac167dc99d2697c4fbc4480e692f8b22b74a7cace5fdd84584a68d514000001009c5052012d", 0x51}], 0x1, 0x0)
clone(0x98e900, 0x0, 0x0, 0x0, &(0x7f0000000040)="d35f7e258a178400100000000020f60ab6")
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4341, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r2, 0x7, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}]}, 0x20}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xdc, r2, 0xecff31f80f43be07, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x85a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x88db}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000000000000}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20040800}, 0x840)

10:15:34 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000000)={<r5=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000040)={r5})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000017c0)={r5, &(0x7f00000016c0)=""/218})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000015c0)=0xe8)
r7 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
bind$inet6(r7, &(0x7f0000001680)={0xa, 0x4e21, 0x8, @mcast1, 0x7}, 0x1c)
syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x5, &(0x7f0000001440)=[{&(0x7f0000000180)="9e204b1ce45be4c16e2a08181bf806f9086ba1a4b58ffe4a24996bcd647d8e71ea490c6619005f755d32d9c2eb21c8dc730447945f651f7d5187fa832051aca4f6b0cc0f0d0af29da394420b1be6f15fc30e35b6c09588489b35a1233c8af955bf1ad61d661a0117f8e4f152bea020766eea2078b037652f026fa1a28e3cbd99423e4a08d1c8fdc86dc2f39245d2a800efe4493b58e2f9c206a768ad3d47fa877f9f0e24159a37d1a26809a56189306e6caeaa998a5586d7e73ce5", 0xbb, 0x6338}, {&(0x7f0000000240)="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", 0x1000, 0x40}, {&(0x7f0000001240)="e78832b434c706fdad5c413c0a04e9afb0e46a5113942c60d39083cf05a63bda0a73179cb28baddb038a35dd72f8d27e0a128054aa704b9ba9dcb42c122b6ec0355789b1a29c756ea620f5f601aa9ede05719996d0f271fe6d7458156aa2afb5040fddcfd45c8287eabdf19874ce715c15e026b13cae9581fa7e7898e5c4eb1858c8438993f4e843d35083fe53ed2c4b35bcbfcb3084d02625afad037cd0c393772d75f85eeb8e452817a95baf1e042dd0cb82be39e5651dcb", 0xb9, 0x80000000}, {&(0x7f0000001300)="754c58310e5d06c960a4f439800d0279dd61de74fb7058e5f99d1db15e5752159d81c8b0ca46f0192986d568541cd1990d1d29a328f410a2743a17e52532397785d404eec8e5e4340d34b78bfda7408ab9e1c7bc7f1d5025e8fa05", 0x5b, 0x3f}, {&(0x7f0000001380)="f5ae5bbfb2f4ebdde24ca99eaa0a258fc6a9ffcb41ee614f32426e455822e44bfce2bd2b544b08c27d5c93cb5d3cede050184fb9876e04b30c2c3c71e49a18c6fe1dee296cb19e4a4966cb007141a3470b11b5726b771c69a07814ee9b1549d8f009576e49f611de529deb7e6b8965ad19fc917514c237a742f4d221fde86d3b5321b01e4cee53f5e3a938b545ece93718d2177b0bc3190d49101313fea83e9fb7c90eb4", 0xa4, 0x100000000}], 0x2020000, &(0x7f0000001600)={[{@huge_always={'huge=always', 0x3d, '--&-'}}], [{@euid_eq={'euid', 0x3d, r6}}, {@smackfsroot={'smackfsroot', 0x3d, '/proc/timer_list\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]})
acct(&(0x7f0000001840)='./bus/file0\x00')

10:15:34 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  612.326716][ T2512] usbhid 6-1:0.0: can't add hid device: -71
[  612.338811][ T2512] usbhid: probe of 6-1:0.0 failed with error -71
[  612.372423][T21017] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
[  612.426989][ T2512] usb 6-1: USB disconnect, device number 27
10:15:34 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xf8, 0x101000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x3ff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x9, 0x4}, 0x0, 0x0, &(0x7f00000001c0)={0x1, 0xc, 0x2, 0x69a0}, &(0x7f0000000200)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x9}}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xe743}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:34 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:34 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB="0800e803325735166fcb4b3eac0531e58d2d8208e8b4bd1ee525402206495c732cc96a9283ab078bac13d9608ed7afcbf4a96f227b9383a179e36237a514c2d958d1fb470454683575038915c4ea2ac4d78222a606ffd3f29bfadba575ba6938a406d6f9410ecd2a281df9ce1cc78152f855ba74df82449afd229a0000000000000000", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040))
tee(r3, r6, 0x0, 0x5)

10:15:34 executing program 5:
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="360000f7a3820000002d04000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYBLOB="2a929a4ccfda45f3f55e4b2862dda442d16eccb5ddbb8b258fff8f9b4424b5c45015f2f3905a31b3edb5b8f839ada8bf7e44c04d7432468a115f4675b41c0000f96cfc4a580a018fa2792712e37a9245f74803388e32183e9830eaefe68eae069f3c014a0a9918570dca69c93f409a01b9fc0cd5cd2e5c7e5100c6bf8903b13e91ff0405161ad28f66e3ff405ded989b8a22f7f44f39c77dd81a0ab81fd9c81116934b79d9db52404b7ea4e91577fe17f75fd990e242f530695f4af36ce8102f7964a5", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f00000002c0))
mq_notify(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x22, 0x0, @tid=r5})
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580)='/dev/uhid\x00', 0x2, 0x0)
sendfile(r6, r4, &(0x7f00000005c0)=0xfff, 0x57d4)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/255, 0xff}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000480)=""/231, 0xe7}], 0x4, 0x21)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r1, 0x180000000)
r7 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000440)={'team_slave_1\x00', {0x2, 0x4e21, @private=0xa010100}})
sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000600)="c4", 0x1}], 0x1, &(0x7f0000000200)=[{0x18, 0x84, 0x7, "7f"}, {0x10}], 0x28}, 0xfc)

10:15:34 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:34 executing program 2:
socket$unix(0x1, 0x1, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x11c8, 0x13, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x8, 0x3, 0xff, {0x4e24, 0x4e24, [0x7ff, 0x4, 0x80000001, 0x81], [0x9, 0x40003, 0x5, 0x8], 0x0, [0x6b9, 0xffff]}, 0xdc, 0x2e8}, [@INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "c3bc833ea55a366e13319874699f6fff81bd86756a923c0dc901054eb7e32d19cb8593168285faafa44ecd08e8d92606fd6dfe2c6f05a995c0839fc2451cf82da647fb56bc67a2d0f0932c2f0fd0eb7bad1fd4eb88a9130c928ac2c25206a4abb5613c925bb1872628dd8ce083193801435d32b0fefe4d8d3dbb3cfe7ff7cda7b18e6dc6e014b15a26b5a29d7e0c4c294cee7f9276d35f09771c096e29673baf097fdfcff74a62998e9d950bf6228f5347d9b79d7d9e04a93c2b64fc9be981b54f8baa4ca693939ca34f8c1d0ea71e85c1476193a0735bae4a675ed2a1"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "a62db636deb14eb22be3bd6cafdd62"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, "4a16"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "0346e68ade4622b352210ae2d559d7137e2ae6f1d899d2519a34a366a39b8bffd230b6e396fc6c01fe02761b5a10563922048d4a8f7871ec9553b18c50f79a542e29"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "de28340ed9534d261b6ca31118869ae8"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "abdf6a40b593aed4b30f004a275822e2983df971f73f"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x11c8}, 0x1, 0x0, 0x0, 0x40800}, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/223)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0b02020000000000fc0100"/24], 0x18)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @loopback}}}, 0x9c)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={r4, 0x2c0c, 0x400}, 0x8)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')

10:15:34 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:34 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:35 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000140)=""/87, 0x57}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000340)=""/87, 0x57}, {&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f00000004c0)=""/212, 0xd4}], 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xd, &(0x7f0000000640)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @alu={0x2349ee4a0a09bb2a, 0x0, 0x8, 0xa, 0x3, 0xffffffffffffffff, 0x4}, @map={0x18, 0x4, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0x0, 0x6, 0x6, 0x1, 0x4}, @generic={0x1, 0x9, 0x3, 0x3ff, 0x400007}, @map={0x18, 0x8, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @alu={0x4, 0x1, 0x3, 0x3, 0x6, 0x20, 0xfffffffffffffff0}], &(0x7f0000000200)='syzkaller\x00', 0x120, 0x74, &(0x7f00000006c0)=""/116, 0x41000, 0xd, [], 0x0, 0x11, r0, 0x8, &(0x7f0000000740)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xd, 0x9, 0x5}, 0x10}, 0x78)
acct(&(0x7f0000000100)='./bus\x00')

10:15:35 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:35 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7], 0x20}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9839}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="742510b7b26b"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc262}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20048000)
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r8)

10:15:35 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  613.217301][T21082] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:35 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  613.450206][T21093] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:35 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000900)='/proc/capi/capi20\x00', 0x100, 0x0)
io_submit(0x0, 0x6, &(0x7f0000000ac0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000400)="5401c1b2c650b8333dba9f1558d53b78b3e544394efd263cd8ecf94e05b73926de60359c5f04ddd34786e8d70a8c6119caf78deeb605a30f263b6cef9ea858168c72b3", 0x43, 0x3, 0x0, 0x2, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x80, 0xffffffffffffffff, &(0x7f00000004c0)="7859c9c13f54517da2d750525dd1972dd824e4d5f5523bf7c2381d839b85813fc22011c298b2c67d35284df17935f04d1d27b1a858bd68cb72dad0dd3bb7eab2fd9e0ba77ca2a333460bb1beddf678a398efe9dc7de1be7e68a77f3e74c893dc6f1a34aa945f4000b2d5525c21cdc375c388fd028fda95013a3ff53c91054a3472285923e425fb81b30a0f891a4efa751ccdacb0dc6a27951438a3be46028e5de55556889182bc9fd7bc17da037f55e0a1b9629be9b4da991b342a41f2c27b90973a2b8cab1cfcd3a98ae12c0b1d3b8106b308a03754b0bcb62b56dbf6c09bdda5ca169bc139d77a", 0xe8, 0x1f800, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff, &(0x7f0000000640)="546bfb013ce42f9326b9191bdc5db4c09a34cdb7910d8599c523", 0x1a, 0x7ff, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x7705, 0xffffffffffffffff, &(0x7f0000000700)="01cb7ffdad873970b8d7acd641f45306ed619f11753f6a036bfcf5be14a60f8f4ab942a8719b16d2adc107f98a751fc821bbc6b3a23ca32ba0ac01281c86ae5e0c46034dbae750ac417a559ed8e237467bc673d162beffdf8e7f6da2c3e3916ad831d0673d699bf3db4f1af5dc730b715b4da78ccce19393091a0c74dc20a3de86d00d88355402c0b61f7971ac4656eedb513a845020419daac16cae418cd4a0301a0f1b94f032d7f7259f4d62b03029bef526d6ddfbc201b86a341730e631904650407ed424fe32", 0xc8, 0x7f, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000840)="4763a5fa2abfbeeebc14e21c3d49b6753d649d64aff8e7605962639dd5ccf6fd8a5d7f43316d6f78759dfa02a883d7d8988f4ecc6644fe4f2af50f8bc1047e4ff55cf1fe6bde26", 0x47, 0x1, 0x0, 0x0, r5}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x601c, r1, &(0x7f00000009c0)="3c022adc2f03d7ce2031a2880f0621aa787492175d222347a64bcbcabd630e9c1c4f4764e9e9ebea9fb30378eabf39a337361424f5966133cc3f3094abcd6da6283ee30ddeb11277b3f88b99d5b5b8acb71c6463aaa7cb55ea2ef934e93f743b5348eb084e637b646e19f862ae16d1d0ee3280e38ed5765e9b4c4b3f9e462bc62cd47f9867c58ef3216a319f417cb691956f2b1f025039a3648375a19915c755bc5392a869b19f26fe26ea42cdf56ca9add4cd477f4a143967b6579e0ed31bcdadf98d25c1fbd1b6c2db059bb97a4379982d6329bb6f2c8ddb34dbbeb31bd1cd18aa32da0b26f728557c3f40823349ae7680969f43a9", 0xf6, 0x800, 0x0, 0x2, r6}])
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x3c, r8, 0x85b, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "210ab2ff0d839e000100000000000059f9d52d12f2122d3e540dbd6736b253977a35c268"}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0x20]}, {0x9, 0x0, [0x14, 0xb, 0x1c, 0xa, 0x19]}, {0x9, 0x0, [0x17, 0x1, 0x11, 0x3, 0x18]}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000010}, 0x40)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000140))
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x180, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:35 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:35 executing program 5:
socket$packet(0x11, 0xa, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
rt_sigprocmask(0x1, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8)
syz_genetlink_get_family_id$netlbl_unlabel(0x0)

10:15:35 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x101800, 0x0)
fchdir(r0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$RTC_PIE_OFF(r2, 0x7006)

10:15:35 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:35 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:35 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:35 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='(\x00', &(0x7f0000000140)='/proc/timer_list\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:36 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:36 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x10000, 0x2})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r2 = socket(0x2, 0x3, 0x2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x77, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r5, 0xff}, &(0x7f0000000080)=0x8)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r2, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0800e0}, 0x6e)

10:15:36 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x9269, 0x0, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080))
acct(&(0x7f00000000c0)='./file0\x00')
prctl$PR_GET_THP_DISABLE(0x2a)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x108)
fchdir(r1)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4)

10:15:36 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xfff8, 0x7, 0x1ff, 0x6b, 0x7, "1e450e6189e1c82d"})
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000180)={0x3, 0x1, [0x2bb9, 0x1, 0x3, 0x1000, 0x5, 0x20, 0x2, 0x1]})
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000040))
prctl$PR_GET_TSC(0x19, &(0x7f00000001c0))

[  614.248467][T21136] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  614.317295][T21144] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it!
[  614.399775][T21150] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:36 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:36 executing program 5:
r0 = socket$kcm(0x2b, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000000c0))
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7], 0x20}}, 0x0)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x7b}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x3c}}, 0x20000090)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0x10, 0xffffffff, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28)

10:15:36 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=@routing={0x0, 0x2, 0x1, 0x0, 0x0, [@private1]}, 0x18)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
fchdir(r3)

10:15:36 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
socket$unix(0x1, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:36 executing program 1:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:37 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:37 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000007500)=""/102400, 0x19000}], 0x1}}], 0x1, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
sendmmsg$alg(r1, &(0x7f0000003240), 0x492492492492619, 0x0)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0x0, 0x0)

10:15:37 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x815)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00')
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x8000, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020028bd7000fedbdf250600000008000700e0000002150001e5c370729b632f706172747c8d7e0fdee2e95dfef1a2f1494b6974696f6e7300000000080002000700000006000b0029009e818b98588dd69e1d92bbec237f64a2d992306965"], 0x44}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8d95ba6e5c87cbc47121b04a571fd05fcc1ed65a63f3f09d3a3e3c9d84b1a70331a7fb5f44cd0d74418eec1b6d60e4049caa0e0139d41614382f518ebe12f7902a42f4a2a6ba1c81cdc5b95425c185738b95a548ee6f825c822bd53455d07a2cf50adc5e423852ef45f910bf8ddc48612366b3d8bd40a0f4e45a9eef99c5a348c1f906c6461825fb72618522c585e98f41c0c17f44cda5fa5d056c649220a9546808d451e1ba318a3f92b06edf5535977d8e0cbe4ca87b0", @ANYRES16=r6, @ANYBLOB="000429bd7000fbdbdf250100000008000c000000000014000500fe880000000000000000000000000101"], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x2)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/proc/timer_list\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)

10:15:37 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000001010400130000000000000000000004000280"], 0x18}}, 0x0)
sendfile(r2, r1, 0x0, 0x80000002)
fchdir(r0)
openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x202000, 0x122, 0x8}, 0x18)

10:15:37 executing program 1:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  615.128429][T21193] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:37 executing program 1:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:37 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80006, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  615.306469][T21206] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:37 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x5, 0xf, 0xf9, 0x7ff, 0x3d, 0x9, &(0x7f0000000040)="338b37b224ba43a1fd23d70658cd1c23a50f5a473d1a1560bae141ef28c69a852c9163a8cc11de842e8dc4afa408d9a8799710211952567aeb2deaa28c"})
ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:15:37 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:37 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x204000, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={&(0x7f0000000300)="08d28841b84337b52772e81cf467268891151c6ab7a368cb4403e5d79935b813777ecae39dde6348f1c8b95297046ab09c3e3e35ad1befd1001e86663647182b273ad2f2b33c819b71959a1ee65895028fc91514cef3f55b293ab2f666ca3691efa4d4873f29fa6b09169022d7fdf5a78a141ade5094eea8af84b00577994346ea76458a0bd1cc00f0a7dd8a9589a690e3cc5aba6c9d370be3d69df7753b99ce7593d05db9ffd8f3718003bf0a62d7e8ec9a855323794ef33183b5c19b932a0f0890854654", &(0x7f0000000080)=""/106, &(0x7f0000000140)="23ac22b27fed9dfba90c178e889977f2b532290cd7a620df46953f34f3c12b0b80adef226d174f3d85908513eb2a046285fcc45c", &(0x7f0000000400)="7b68aa3900eac4f1098f464728dec691c95c68eb4d48273c3b2845c5b5f8bb4a5751eea059c6c3b6e0f9fcce9141b14463aa30d37a4264827fddeaff044791811a68931dc96028abdabf7a2208f6fd59c7fe94b28be68505b2bd7ad38346b41c21206a720adeff5a5de9693a341a28aa741d3daf3669c6f7cdeb2e304610678bd02a214e977af474b107891e9521757414b5703eeb6c6bd2adb50f262d8c4a42e6fe898d6c341c923bf8f526b4333c44849ff808e8c08188773c8b94ff62b22fdb54e732f2a2b2287202cc4e96f99ed8786458f2e2", 0x8, r1, 0x4}, 0x38)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
fchdir(r0)

10:15:37 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
socket$unix(0x1, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:37 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0002020000000000fc010001000000010000000000000000"], 0x18)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x7, 0xca728040, 0x80, 0xfffffff9}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:37 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r2, r2)
r3 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
splice(r0, 0x0, r1, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)

10:15:37 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@rose={'rose', 0x0}, 0x10)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280380500000000000008000a00", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0)

10:15:37 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:37 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)

10:15:37 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x3, 0x0, 0x6, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  616.077186][T21247] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:38 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  616.146272][T21258] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
10:15:38 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)

[  616.392512][T21258] device bond3 entered promiscuous mode
[  616.417839][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
10:15:38 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VT_WAITACTIVE(r0, 0x5607)

10:15:38 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:38 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  616.553510][T21264] bond3: (slave bridge2): making interface the new active one
[  616.592611][T21264] device bridge2 entered promiscuous mode
[  616.618877][T21264] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  616.684721][T21264] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[  616.726305][T21258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  616.763212][T21258] bond3: (slave bridge3): Enslaving as an active interface with a down link
10:15:38 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
socket$unix(0x1, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:38 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:38 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r2, r2)
r3 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
splice(r0, 0x0, r1, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)

10:15:38 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='9p\x00', 0xc000, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@cache_none='cache=none'}, {@cache_fscache='cache=fscache'}, {@mmap='mmap'}], [{@smackfshat={'smackfshat'}}]}})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_pts(r2, 0x10080)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:38 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
linkat(r0, &(0x7f00000000c0)='\x00', r1, &(0x7f00000002c0)='./file1\x00', 0x1000)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275f80d6e0b726b6469f10000000000d0e9afb9754fee78d39be74fb0a0caef44ec14dd"])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
unlink(&(0x7f0000000080)='./bus/file1\x00')

10:15:38 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', &(0x7f0000000080)='./file1\x00', 0x1000, 0x5, &(0x7f0000000240)=[{&(0x7f00000000c0)="2b51d405b52bb1ac92c9f9e567d32ae94da20a15b73483baa8f9cf3976db21936886bbee2c13b5fba0e710c9869a8042cb68b3586e22a724a05c155cd087d9c4d33e4fe1e431f61e214eac98f38d12fba0f727327f4965f099e1e34ea6c17d45111f98997adae74fa14abd5c4767c7f1f1da5c0206f0940ea428bd566057b4f27fe8956ece88a1c22bb8a3d811ccc3c9f273f2d712ab4e3a813c8977cc0d2ce9d5daa227632de99b10958070e363833624f2d29d13df15cb9e2e9e1ff70b97acd6e354108516577af268169d1ac00724e42f3ae9cecc001bf96d0b7a98b7452b72784b", 0xe3, 0x9}, {&(0x7f0000000300)="377376410b4c2a9b9f20a20d9a2130401a54f4fa79a70655d843cc13c48e9e943de54f1dcf93181e13ff1135d9a0ceffe14923ec64b0fd39cc0e783d314816295da5b4de865a93524badf7bb5afd247faea293e3026b901490ef9497676dd999175fb32175791d9a0106c1de2dc4b062fff0fc9dbde576e35caab25d3464f4e07264680e549a0e71484373395509589848162446fc7a7dd76062b4c36b6892ebddda", 0xa2, 0x1f}, {&(0x7f00000003c0)="b8f1dcf746e14d4c2e0973ff5c39e9a4feda7f8191a31547f72f7a8050ce16d86bb70831320af48499d3c221915ea44bc9ee3bf82a78e005f69424180affe64b7d0b7e2f25a55b21bab8100ca5b1c2600b57941a5c1f3a56ed9f781e152a74bdc1a2aa826a400febdb9afd2e20d0f4a0e40537dc83dd6b7f04995117403df7250c6b5e2fa8dd9f3473290b5c81ea20f5c9585ec0ae12456ad511e8cbc542e1cfd183c476f91a585c4585b737c6c0359bf6391b29db77ff0f235bcfaa5ceeee81f82924049e09ee990804a1", 0xcb, 0x6}, {&(0x7f00000004c0)="c08ea94867c427860b8880f914de3517dc5dc41ae94089a2bc21ca5f74572935f5f16961cfb0a488c7e23030ce845ce70bc4a747ad61504596664d3fcc20c1d7132ba3dfd5db5f2aaa6b278fb93309ef736165e04ad7c53d409a19ea49f0bfba5852ee8e525c4c8bc49d7e936495dfd79364b580d937bae9140dae79ce6eed403737d2fdb627e583ab83", 0x8a, 0x80000000}, {&(0x7f0000000580)="d3ec4882d67553c03c8ea2a75db23f03da24736f11bff000bde4d4b6afa3667ba3d57717b06f356b51c20e7d875dc74645f75f3b970e3a966bb8ecf6e551cccc29abfdb0018461171001b62bbef466ae6d919a6891b053d6e7634235176a5b432f6cf988cb612583a0bb014686c7b84183590b699b1cbfdff1b1ec0b1359bf6ff26b5428d78344558e7152107d2d06ba6acec8c6e4350f6c775730b1265974a00bf4b3b3", 0xa4}], 0xc0049, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00')
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0)
fcntl$addseals(r1, 0x409, 0x0)
fchdir(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000640)='net/nf_conntrack\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r3, 0x0, 0x0)
write$P9_RSETATTR(r3, &(0x7f00000006c0)={0x7, 0x1b, 0x2}, 0x7)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
connect$inet6(r4, &(0x7f0000000700)={0xa, 0x4e22, 0xaf, @loopback, 0x9}, 0x1c)
ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000680))

10:15:38 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  616.969697][T21335] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:38 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:38 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r3], 0x20}}, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r3, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  617.113543][T21346] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
10:15:39 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  617.154286][T21357] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
10:15:39 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:39 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:39 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:39 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x80002, 0x3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@routing={0x6, 0x6, 0x2, 0x0, 0x0, [@mcast1, @local, @private0={0xfc, 0x0, [], 0x1}]}, 0x38)
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)

10:15:39 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r2, r2)
r3 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
splice(r0, 0x0, r1, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)

10:15:39 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x7ff, 0x8, 0xde6, 0x288, 0xffffffffffffffff, 0x1b7960, [], 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000000c0)="5bfe4e18a956c0be531b919834a086a73986e6da387b13db45360d70de2faba2953e44c0672b1a662fc4b395bf3a3b762b25f739a69d99647073dd9cb08060d53100e695d59117c1f1dadcf8e96862417aff2957268a82e54d2571b9df7dc24125b20189dfae03662242afc2db4cc6a213e2fc9c935328b4e70f32874e85e6de288671db1d01949e856da839703f952444f16af7db02b26df57267480168618e6ed4f063d5770b8c1b611ccceb56e3436a0bf60be176bad2efe75aa12a944ebc7fa0576f849486d7262962b17688563eba1a2bbf96a65dcda19043ef1c2a360425de", &(0x7f00000001c0)=""/48}, 0x20)

10:15:39 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:39 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0xfec00000, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x621, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x24008010)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:39 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x7ff, 0x8, 0xde6, 0x288, 0xffffffffffffffff, 0x1b7960, [], 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000000c0)="5bfe4e18a956c0be531b919834a086a73986e6da387b13db45360d70de2faba2953e44c0672b1a662fc4b395bf3a3b762b25f739a69d99647073dd9cb08060d53100e695d59117c1f1dadcf8e96862417aff2957268a82e54d2571b9df7dc24125b20189dfae03662242afc2db4cc6a213e2fc9c935328b4e70f32874e85e6de288671db1d01949e856da839703f952444f16af7db02b26df57267480168618e6ed4f063d5770b8c1b611ccceb56e3436a0bf60be176bad2efe75aa12a944ebc7fa0576f849486d7262962b17688563eba1a2bbf96a65dcda19043ef1c2a360425de", &(0x7f00000001c0)=""/48}, 0x20)

10:15:40 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x7ff, 0x8, 0xde6, 0x288, 0xffffffffffffffff, 0x1b7960, [], 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000000c0)="5bfe4e18a956c0be531b919834a086a73986e6da387b13db45360d70de2faba2953e44c0672b1a662fc4b395bf3a3b762b25f739a69d99647073dd9cb08060d53100e695d59117c1f1dadcf8e96862417aff2957268a82e54d2571b9df7dc24125b20189dfae03662242afc2db4cc6a213e2fc9c935328b4e70f32874e85e6de288671db1d01949e856da839703f952444f16af7db02b26df57267480168618e6ed4f063d5770b8c1b611ccceb56e3436a0bf60be176bad2efe75aa12a944ebc7fa0576f849486d7262962b17688563eba1a2bbf96a65dcda19043ef1c2a360425de", &(0x7f00000001c0)=""/48}, 0x20)

10:15:40 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x9)

10:15:40 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:40 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB="bd34077f524fd41bc7f1c8f38d9428b005d36b506c61d05a20699c35f425741fed9189f994de8bebd6b3945ca40ea3777a35086bef2f85dfcf4d6d2c3a308529dc949c", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
pwritev(r3, &(0x7f00000005c0)=[{&(0x7f0000000000)="31521c6e00997a71b187c1516e9d", 0xe}, {&(0x7f0000000040)="5b6382e7c9f230954d108cb23517fef0e0977df20476f53aa4da6e", 0x1b}, {&(0x7f0000000080)="f57ff80b6e18a473cf11996a39b8f32d30b15548181d9b0801a25ff1cc536e94c1baf7b6791e4938e4f35960f896863fc9f7dcbaff3f1604333c68d48579b08801", 0x41}, {&(0x7f0000000100)="296d0b9204f2e44425fe3560a1135564c4b33d42bba7c6df0b08403185154be0604d00431fadc19f5e157e70f9b5d796b17ede1091e94ae1f262a6552c821e6705c1361edafc199cf6dcfb7c886b8ea68e9448062ab429baa7572e0b15a946d4d1097c4c7c00f94fe31901c0df3fba2af4b691a68f51f17c5e9cba1be077a6781915b1db8ca39f2c0271c165b11589521e975945fee2beaa0dd4276dece29582960c3ffde11d3a771780208cb2b5152f465405807abf703240302997eec3a87da232586d8e3bb438e14b8a52dc5cf8ea20787bb94e0e0f7447a5f835be33db", 0xdf}, {&(0x7f0000000300)="dda701625b4d604fea341f74818e7d32f82b39fae7b12dec8aa73c7b9ef8a3b50fbb0864a220f6adeecb58a21de6d243296e75086cc641e6e43e21d90f408d0532877744f2ebfd6161e7b905389f6d71313b8c6740574df1aa16a6e5e2380861df374d5f793af810cbc8727eee3573ea53a1abedb2540694f1aadd3507a92600015b89ea", 0x84}, {&(0x7f0000000240)="3ad26f49b8aed41392496c077c4c745e0e9487ddf2779c7e819a8851d9902e3546f806275b19561766ef39e0d8494d21970a8056c69a1b604456463bfc1a9f6630107433", 0x44}, {&(0x7f00000003c0)="4731308f25ed452484b416f3d210883a28da2d4905f1edece349ffe0ccfd157895f2b1e874110eaa80da1f87781f07b54192823ab742a06838050206661050491d93fe4e598924acbcfe56374f7ad80476462529c1870a7463630489971c131beaa72b04f5ad3e10dd6aefe44a50ae8bfe76b7f97f0f73a67e351415ef7621285d290d3429d635be3e6bf622a2b0bcb2bdb7aa152ee5c739eed330730d83a0e1781f651274b634ffb4a899cc492c5d18a27f7c58948f32d8533bf592bd3299cc5c6342bc0350ca6110856c578495990e2113d56819c81caa8add7e8e3db488281a5c912b719bba", 0xe7}, {&(0x7f00000004c0)="9b258945c21e174d84ca36f9743f291d1393ebe46d28afa94a80fa64b6c2f7943c261d795a9af0c37ead901f3d293d8574f6328d3b7cf1ba81bd9af66d4b889d64df5773762e8d47cd3d8c133d111b413fd09c0172264c9ad8801d75ecad3d6072eee9fb92e7565c90e06b94003c2ddd8a09ed65aa1e587cc79fe831b94ba58dfaf24c409ab64e4214b93faae6205c67bdcb40423bce047a3006078f83ba4b776ad249cb931bac3ad00f978524960e29a01597233f39e5b6e2e4101696f525787b6defac7c439787db6e7616d62aaca273f16f6712305bccedf261", 0xdb}], 0x8, 0x7fffffff)

10:15:40 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  618.367635][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
10:15:40 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:40 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x18)
pidfd_getfd(r0, r1, 0x0)

[  618.725091][T21438] validate_nla: 1 callbacks suppressed
[  618.725102][T21438] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:40 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:40 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x7ff, 0x8, 0xde6, 0x288, 0xffffffffffffffff, 0x1b7960, [], 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000000c0)="5bfe4e18a956c0be531b919834a086a73986e6da387b13db45360d70de2faba2953e44c0672b1a662fc4b395bf3a3b762b25f739a69d99647073dd9cb08060d53100e695d59117c1f1dadcf8e96862417aff2957268a82e54d2571b9df7dc24125b20189dfae03662242afc2db4cc6a213e2fc9c935328b4e70f32874e85e6de288671db1d01949e856da839703f952444f16af7db02b26df57267480168618e6ed4f063d5770b8c1b611ccceb56e3436a0bf60be176bad2efe75aa12a944ebc7fa0576f849486d7262962b17688563eba1a2bbf96a65dcda19043ef1c2a360425de", &(0x7f00000001c0)=""/48}, 0x20)

10:15:40 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:40 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x4002, 0x0)
bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc)
fchdir(r0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040))
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000280)={0x7ff}, 0x8e7345f6ce72bfb0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000001)
ioctl$TCXONC(r2, 0x540a, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
r4 = socket$unix(0x1, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x1)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r6, 0x6}}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$P9_RCREATE(r5, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x0, 0x3}}}, 0x18)

10:15:40 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="a10000000000"], &(0x7f0000000340)=""/105, 0x69)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0xfffffff7, 0x0, [], 0x3, 0x7})
acct(&(0x7f0000000100)='./bus\x00')

10:15:40 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x7ff, 0x8, 0xde6, 0x288, 0xffffffffffffffff, 0x1b7960, [], 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x40)

10:15:40 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:40 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ubi_ctrl\x00', 0x38441, 0x0)
connect$inet(r0, &(0x7f0000001680)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f00000014c0)={0x0, &(0x7f0000001480)=[&(0x7f0000000140)="e01084d5c93b296fd5a334d00bbdc64fe1cb315d40a45e93d835fb0f07ee1ce5f0315b7aed1d0e50c4a19856b6d8c04a03582426f247fbb70513a5930a7490c71bf7ef82cbdbcb2856e1af6a927c0c188a884948fd5fb9f367070a37325bb08542f4daa5cf1a969051c5f2f18a38facdeb575c605b4f8259910684d389b37539138de7afefc49673ee88eb5f2944508abf27160fde7fa2eee5342469078c60e9fb495f3a95db113b605584f904a952ab61fb606f0782ddd387cbb95aa6d7f1f384735313bccd8c60664504ef52884670f8b8b7e5dbcd66b015b57d63e9ab1362ac0a5e448f6f1cb3040b6fd3726663a3046a55", &(0x7f0000000240)="b5aab3dd06c7cf0642a7a53049fa5a964150665cdaf8b68e9d8c75f188f073458bfa5e29f75600e279750a2d71644efce3b2f467dcb7e9fa73f26d82b6fd812eb2626e813e8da88d9b7b564e3d0f0b197d4309ca03a5f9", &(0x7f00000002c0)="fbec8a4d7c1f6ce4381adc09c3c32b66131d524a5df68c5c2460ad9b7a1ce2536b356ac45772bb6ae2ea60491a2cdfe6b9fa956ff9b991427b0e795dabc5181525f54a669df0397c8f7d2af4a8ea9db38548e0aef359f68f49626cfec0ee30a000a9adfecf14e63766d35b19b1d5eeedf87e31104f03a866c44b5fe2df2e35be4469541dc1b4cb33d038d7bc1e36c16d2f159378769b04c105c253e5b92d7c91590afc593567001ff1c03df23587937d5f8fa676186d10bdb2102e", &(0x7f0000000040)="0ac42cba6d8d2c4660e0df", &(0x7f0000000380)="ce6301e55a8430f0aa114b1c5d52287f8f701f562219e227a63d4566cf8403a22e9faa6bfe71f2f9aafb52e47dc8f9edaca8eefe99708eba5818996c1d274e430ec01368cb7fc15388a68f41876deae8c789130d31447b92efbb8a65921f6fb48a9601d285c6af58e165c2800b7a411621da76e23fdd2087b7f570975520a183d23c8d340d157715426819905e3fe7bc70b403273cce90dd0dad4c5e9654999f5971747294db4f7d1866a537fc58c5e651aca2da4455df8d5fd15c396c481ee8965468494c2b1843e15828b9bcbc9700016fc18094452472f81989e9f6292b5a71191778dab845913547a2617576b9429b8733f579bfffadf8f54098886b6ad44b04fe8f3880ce2a5ab8a6c626e3f9370914d3fa9e116a0bbe11c161d2dbb5112aa3d3cc61805e7296c3f14a713e5775089242aed554179b5160a606c1848fc8f3ee50942fe36be8519969ffc8f72005d2ac4c895a546f349913a1ed6b7fc3ebca40ff1d3ba2a9c98ed26d7ecc6ed759affd886f543bc3308694c730014908eaa4bc56cd317ded2ca135387a6159c69ba35af788209762f334ae4d52aa3b48ab809c1a16458e18edd49a0a70be44ef13bb3bc4dfa8ff9fa6efd4d087225ca1df1230935bd4d9c5d846f113d848e6a6caadae6a8d3e9692b6341bd5b837e6b03feb9e2346c974f318cbefa9d34c6327eb49a2ba172188b715a61b7f0935d18f6b178a752b73aacf4eb1a15c05e3e84e4a0380c343f88c9e8fde26ec77fefda0176eca82030f318ae1a6c2d3c62325c06e3fa7342cd65dda94d997e3e20bae318dfd9b0fa23e7bca3008621d5817f0f7a2d3feb37d4f9d70972eb179480aad78ee68d392a70e8a441945e530fe4094fe525cea9721371eca5007d4383d02d01006f85a6887e047346e2cd97945f9fa37b49393bbef3ec03745453ba156a2b09cd55bb7c3c207e1ebea99c3f0d5bf95230f3593aa4c5bc02107a95fff9c8f2df97aaabd0e49a65757810bb254db026473c3ba8913d339f5617cceb68868f9e96a78063ae277a3b6acd41e4dab33f71ea321f3eec65f145a5201c5174d4027e602815cbd154ff37105cf7b4b537b61fab7e118b965b98152372f200ddbc94e02d1e59e6cca0f6f11cf7fe807e0a83395fea1862f4a164834a483fb30acc9ef4e803288561f0fe51cef0fdb7bf85958c5f1cd14309089613e29c22549faa6c481c443a7d28eecfd1dc7cb50d578a02c03e581033ccd30b97896022a074603daf5a529f630b6f8a195906013f81faa7c5a4519983b083edbf8e386cfd2e03aca88c32ba3e327ead2a9a888dfae3b6a4dc2b66e81a8401d16761684fe3ab15c548380ed5034b1e6ee048aafda17ddcc0a6686a878332c63846a88de16d3e356250b4f187f10564550262202b20630eac1bf840ed2fdc3030f05aae0826ca0566e40ca23be0d040ced2c47279bcf870b8417f9bebc209dbd4f9217f4a34bd376d803daca12ac153a93462b7d2033e623aff5cc7f9309fa09a601c7039bbdbf178ee4d4e940aa75138a3c4c6f72a403f92d173ac9d4436e41979c32962b5a842e2ae7310858895c0433318ddb63824fdd8f12ccc8c46b1586799bada5f13c4d769dcd1b534b853fdd62435a3cc5fdcd69299b64e5d02a5c8d567b2a69f8f7da2b59ade743b5a8dd47baa628ece8ed2bf72bc12b972a566076874340d73a59f74517c5b11f42144f4ea85b905c6a2f39f2f053d6ddd8e755e805b95491841354e09c1b6c7f02e1bb0dabb9d9b4b88f19dc515dbfe2ab3b009405876c673d535cd29b5e94e0c596c0cae4fbf043a473415feb9150ffb769595fcd0e34f1869a6b17397d92a47bcb6a4314a71423a7f827d6da4cc69453257f4f2ff5c3f934a99cdf0d1a6dd2ba76819dbf52d6e65147f0b6363105c8d80709896ddd3d1287bfe52bdf2f989687ea9261b29c6cade27ed6e629e2c949c2bd43dd566b60ade93e4b9ddf60f76b348e7a8498491b95acd1e4810c9c6fa282969c881106c6556c72c7bdb7a9cded3bf03942aa468b06e5f15033f04a7afc7446313e85e4684e35e293ef79f005d369b8435e944f0e90adb2f92348fd47b45c0f4408c73e5ebb63b03313e7967ccc0d8ee0f67e951a688aa4bdd13be23505ba0b1f96058e40a88698cae365148862c6d226d33eae104c1678bdaa9551cc168806b3d741fa80ef7e56cf96e36c7fa033684f486457be0f086467767ec0260ad7a82eefae9c862af78a4e4de12a6446a5aa6bcf7552f875ff65935e9f912840cf7d7a90a269335953f19d5ef60055c4d6dd13f6b6b504d8e10ecb6943d9ee55b724a7e1f4ca9110f9b6f5afea03addbf6d8f7d72482e980e0cf62fb92acdf8b742e972086604cb7526ce87365e186af4cf8aa26c55e7639fa706bf4d5f173a230aa31d1dedcddb6616a1f7b1b2153d285d04a657012bfccd085c0230245b8c93e7f3fbcfa41f4ffccfa2897f16450923a9beda74b227a23b931195caf4c7b4cf66a1b3772a9ff125f64cf167e2325eaad9753da3c2e7a2895b18ff5a590acb2b92749ae167e854ba50dbed57046710e2ad7555b32d156ea1eb849bfe9b949578888515502b8e943225d450392eb3f28eb92b6d9a987513eb910679faba10c0f82a53f7057e2ba36c85c382ebc3372edd68f475e8b93add8cc945189f046000c2d303de005eba78a734d2604e7d57d69202268bb8808ed3808218ccffbb1980001752727cce77b1d297dae6f15007e9902f5cb57725c479efe43221fa56ba95eb7558217040270fdf8e09c4b246d88fa8cc20be46e4b89bf353751485de46b158fc9aea1d0d1c0a80a1c22a083fab0ed58b904d70515d7a1d0b17b35336006d328d624fead1278e79680eed1067c3ab73d30acc67efdafe403af98bf61f91f9931dfd6d8bea57cb00b29a109e5aa64156bfc85ddfd240e33fd9f3106d2b7fbcd1e6fdf1d9a908dba9a51cc3155668557e6697fd0ea1c2073e7df2e80e5c7f0fa340b29bb68e930d7d783f4ccb43403d3e2a8787d1e682ed0ae8607cd80884afbf48a6688590b822c2e9b2b34f570e733747d79a138c4fab0efdac4a4c40de055124f1117580f32e4c3566f6efa5ff83eab6c459d79c45c7b83bddb4d013d414e167c856ec1a5b59a909ca2191ffa2f803cca4c39cd08db520cc449df2412c3401f33a400aeff5b83752ae63b4c0bbf61ed87a0d323b951a0776c17b54c6286241bf0da8a3852cd2a0db925e116ba1052ccd2fde95d234b72570275c4c3791f6a616e018ba25bb3104e232bb3e1b4cca56a7c4447eb7e714d35cc4da34e9d74a295aab9801ef223db2d2636226a234a36690b162b3f14b446ebb4ae7b7dd1b37cc102a0f179e92f7fd8b6f6ada30bb29d9287e566e9e311c6896778995d60e6bdfa2b568ffca4b3d4dd6c5c7814f19774d24ae6995ab0f5a1e5775b14ed3fc870bcc6d27b5921071c0d34dd568f0436cce8c829ba9ea94debf52bf61a0f076f7ae3ebdc9d7f33fa25d8bbec9781732b18de5edb11026f7e822fe12693601f065db079ab512475934ea032c831b5a27ce36287ef2d089b3863a501fae1ede40bc0d714ae6dba9fd77b1e26dc2db6cbfc881ae7474de780f1cc6d30d8ca4cc018c7a84eea01eccd214453f34d99314c74ab2d6c526fd72c1ae9489f6b89974dca5c6e191d1518ac267c69586cd09dfe8acc5b9982bf95f593f48da95b6a8271f7720c8d0ac43eb7fc4bc7da85b4f8b888f0ac6ec81eef28ce332f707657a6c3a5e37c6960a40c66931df02a705d44c17552ba800954b30bd7b1730f732f2f0fbeb5e4b267802ae76a90f3b1a8b17a7396aed93b96bd977a94eefc3cb5c31d7ffe6ad7128491a3cf81256ee9f7aa4e13da51235c69fa05ae04a9acdf896c1fcb6e20a344e6351d849bad1d5a161b0348537bdb291ae3161e25822864d78d3e95f78f33739e483c3a80fcba1470f441e622b72c1cb22832171a5a39f974dd6af71913059f5609f39c1a8169104af8c47c405491f487b80ac71f2d099dd371acf48c94dfd26d016f32af8f132edbb89457afb7e30fec41ce6a4d9ee9810eb9332423a6bc3523ba116320a1adb28a722592c4c3450a7767e88a2a544d3c9e482e1723e95eaefa6a7aa3381c565a23580c7368105fc1b04b227eb3c9e93dcdbffbb8640bfc73002746d7e704d7aa31de527a4527c1fadea795df2d5644a12d26822def58b07a2d0fa6c7fa6ca5f3ea59cfd01d90f1bd796e74b5950a8ce783550a35d0d57d7aeb659eb982e21608579d5eb640416a89de41e513268024796f045acbb80f41ada474041d3b33b706ba66917461e0575c2e3df28a267527b12e7ffbb06006a309b9315c2d3df3152590f6509610f771e1b15878711e4a638fa3aa18cbd9f0ce3d46ac2d9d15c05fd1ce881328d8ee1ccfff759da89654910e10c99da01786cc927ca7e1a6e66bc5c5aec5852fac3d8e04830a3a022f8dd2867dd7323e5a6c122f0c633409cf7d479ad6d095a3c35056b11ed296948c80bcc2e3bba6d6cfd7297dd6c8f849fa1d22560d6bbd8685c0a47e32961ddacb74ae3315b4504aed52b5cbbf1d5e922af530ca5625df0b1d9bc778991c3775fa29dc1b4b911c74b49af9516285d407d28534fd45c71680878a5686ce9f70766af6f18a3787ad1d6c24f4d20a082850a31a32cd2aea77f179924ad76b3cee980c386f6cc9d8e68fde39f2dcedd20d73b0955f1f5b7d92d60184630c04bfdf60d7e9d29e92b0c2bfb6b33c5816cedd141e3ca579aaa6f26b46b41ae8205ccb53203d24365e0d1e0bb80b62ba173cb01da45169010251afc05744a37ebaafbefb001f643aa218bd9e43b2dde40d76a75584989e1c7e42537393eb609ae8162b5436d81a1b0c82c42137a323c3b28d044624a0af987a7712558db2e716bfa53245e8e49e3110418fe12c42f5c83944fa3d7b792739a63a47140d325d2d33a7a889e67731cf13853c02f47c4ac2e213bf70915084007457048584135ba99d850387d1bcc201bc40807b8b83fe57ae1476577a42a023698a02f3452e1fd37aa0e856a7e8bc5ff4ad186749290d77e71103e804b12b5ac598a80420d0f76b4a6187a27d3d7de27465b263ab7efe4f71a2796242edf12a3cf0670200213c1b99fbe1049543b5157e0572ab7b8862bf5c25790686d744df9df0817feb106791f809c7d793cb029881fe0110c6fa4d5db016dcfcef1645f430f3afcd96b4938e3d86e7c6a0e72741c7970d2c646129a74615b4401596aae9a31fab9d105372223950359b9bb5aec06117172adc5a4464bda04b18b0adaa4cf695713c1eba4679d2744729cb4effa510d878a1801f62699068b077072e11089fa82800534b2e689479a84cf14e1367bb1a2dd35cad91327295cefea4f412d06d7ac6063b2f0231eecbee42cc2976b6d7b9d4ef45faf9def0d932124cd8b21284d4b8360311a2a7941f87fe11e1cd76ebe20d5c9f192159f01e695a28b13ac2aa8be63aed0205ccefe218e358337829b2e90dd327f5f44723c24c851ec711e0fff6f7ec3ec55fcdfc4bbd863ef6440db7847f60b9deec5563057d776cf3ea5e1514d403942a07511c9077b3e5c1b5d7a5f2b26580d20da95d1b9a05024560d2e8ba0254e17e4949031169d47e39cc09f6c12b63a8730e8a5fe96dd9ec04b7b01110d76f6f7fd9ff137c9c4c3814e84c65b334b4eefc9f54ef7ac9cbc1696a7ee7644c0b8de1ba4a80bbbde75021491d8a64c960a3760ee1f699bfcceca0e68ddfce70bb8644", &(0x7f0000001380)="a5dab7e343252311fc5bf34831f73b75e8096abbf4621cf11ecee121a3272d86986218897da7c697c1d6adb24dd384ba548f184e96e242cdef679170fbc3bedef4a63b16ebb3f7022a0671bdeb59b3e1653a9326f957e1b3b4dc520147c86ee70b19f36eda27058e175d41164b3d46df0033c2376a500aa660889f31b04936b6eaa8fab4e9d55fc3c7778082927a78f495f2b9a1d7ecf1c80cf5b387bdeda6a53f1f3048b85adfd85b657ddc433da66f7d18efacc2186af9784117741004079426c001a5ef9c39af13219e69bddd8916ef788b637d0918"], 0x1c})
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000001600)=ANY=[@ANYBLOB="000000000000009000000000000000faf7a00596ea000000e3caaf180000"], 0x18)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r7, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x2c, r7, 0x410, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000080}, 0x24008800)

10:15:40 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:40 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:41 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:41 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x208000, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000140))
acct(&(0x7f0000000100)='./bus\x00')

[  619.657715][T21482] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:41 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:41 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
fchdir(r3)

10:15:41 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:41 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)

10:15:41 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/66)
acct(&(0x7f0000000100)='./bus\x00')

10:15:41 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)

10:15:41 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x8000}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:41 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:41 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)

10:15:41 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x604001)
sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8024}, 0x8804)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000240)={0x1, 0x5f000000})
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x6, @mcast1, 0x8001}, {0xa, 0x4e24, 0xfffffffd, @mcast1, 0x4}, 0xc5a1, [0x7f3, 0x7, 0x3f, 0xff, 0x1, 0x7f, 0x800, 0x2]}, 0x5c)

10:15:42 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:42 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  620.537614][T21533] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:42 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:42 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:42 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x7cfa}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, r0, 0xffffffffeffffffb, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:42 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffcf0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x12082, 0x0)
fchdir(r0)

10:15:42 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:42 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:42 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:42 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:42 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}}}}}}, 0x0)

10:15:42 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:43 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:43 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}}}}}}, 0x0)

[  621.462515][T21565] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:43 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
socket$unix(0x1, 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:43 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:43 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4d0280, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000180)=""/242, 0x10000, 0x800, 0x6, 0x1}, 0x20)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r4, 0x7, 0x7, 0xe6, 0xf28e})
acct(&(0x7f0000000100)='./bus\x00')

10:15:43 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}}}}}}, 0x0)

10:15:43 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x200000, 0x0)
fchdir(r0)

10:15:43 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  621.699662][T21573] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:43 executing program 5:
syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "00000080"}}}}}, 0x0)

10:15:43 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040))
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:43 executing program 5:
syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "00000080"}}}}}, 0x0)

10:15:43 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040))
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:44 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:44 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6022, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)

[  622.340440][T21618] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:44 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:44 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040))
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:44 executing program 5:
syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "00000080"}}}}}, 0x0)

10:15:44 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="a1ec1b307ec4aec9970fef30a9ce3b00af72a7ab3d8db33aebd8f07364a652f4cd8201aa69160acccc6110267d4b980976b236dec9edce207119e9693007cb6c750f81c14a4d8e495c3a932d516c6c30be2746aa914f590d0a23cf16070400000024d3af4e3eae6665439c1b", @ANYRES16=r4, @ANYBLOB="05010000000000000000050000000e00010002e57464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000"], 0xa2}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfffff13f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000800}, 0x4010)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x0, 0x7, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}]}, 0x20}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x24000050)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f00000002c0))
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000040)=r6)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$sock_bt_hci(r2, 0x400448dc, &(0x7f0000000140)="21dd64fca5b388ba8548cd35dd33548958a5f311d77429e7ea82934861680ef6ae4196ca8ff30e5bda994773fa366d5becfa6296e91d5520b8339e2fbd11869c1a9cf59d551a6c26ff378468bb38e023306753ead52d290de6036cf9bfd86409d7b44d91966e2da2e695dc02ad7a6372fc62590891093b4fa9ad150c2a25103bfcd2d15944815e2b5df0141cee405ac2b834a0ab25f3f2466fde718af309520486bffde6f4f9534e6a964487ac7dd16d3d0572ca454a45c7d5b482865f8ac362851b9428e6565bf65501c5ed84be67b377")
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000240))

10:15:44 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x3, 0x0, 0x0, 0x2000001, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x113900, 0x41)
fchdir(r0)
lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x10, 0x3)

10:15:44 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:44 executing program 5:
syz_emit_ethernet(0x44, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "000000800000"}}}}}, 0x0)

[  622.632888][T21636] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:44 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = accept4$rose(r2, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@default, @rose, @null, @default, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80800)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000140)={0x7, 'bridge0\x00', {0x1}, 0x3})

10:15:44 executing program 5:
syz_emit_ethernet(0x44, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "000000800000"}}}}}, 0x0)

10:15:44 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:45 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:45 executing program 5:
syz_emit_ethernet(0x44, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "000000800000"}}}}}, 0x0)

[  623.273466][T21668] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:45 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:45 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:45 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = accept4$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @null, @null, @bcast, @remote, @remote, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x80800)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0002020000000000fc010000000000000000dd0000000000"], 0x18)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000280), 0x4)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000011000d0400"/20, @ANYRES32=r8], 0x20}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6a000200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRESHEX=r7, @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="08003200010400009540839c5fffffffcd96"], 0x5c}}, 0x20048049)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x7, 0x6, 0x8001, 0x80000})
fsetxattr$security_capability(r3, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x6, 0x1}, {0x0, 0x7}]}, 0x14, 0x7)
fchdir(r0)

10:15:45 executing program 5:
syz_emit_ethernet(0x45, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "00000080000000"}}}}}, 0x0)

10:15:45 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0012e3f7870ecab302000000000000000000"], 0x18)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0xaa5c, 0x4)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x20)

10:15:45 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200), 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:45 executing program 5:
syz_emit_ethernet(0x45, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "00000080000000"}}}}}, 0x0)

10:15:45 executing program 5:
syz_emit_ethernet(0x45, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "00000080000000"}}}}}, 0x0)

[  623.641943][T21689] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:45 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000))
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)

10:15:45 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200), 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:45 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:45 executing program 5 (fault-call:0 fault-nth:0):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  624.137628][T21715] FAULT_INJECTION: forcing a failure.
[  624.137628][T21715] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  624.177064][T21715] CPU: 0 PID: 21715 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0
[  624.185770][T21715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  624.195831][T21715] Call Trace:
[  624.199139][T21715]  dump_stack+0x18f/0x20d
[  624.203577][T21715]  should_fail.cold+0x5/0x14
[  624.208179][T21715]  ? perf_trace_lock+0xeb/0x4a0
[  624.213050][T21715]  __alloc_pages_nodemask+0x1a3/0x930
[  624.218433][T21715]  ? __lockdep_free_key_range+0x110/0x110
[  624.224168][T21715]  ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780
[  624.230943][T21715]  ? lock_acquire+0x1f1/0xad0
[  624.235699][T21715]  ? tun_build_skb+0x1d2/0xf30
[  624.240487][T21715]  alloc_pages_current+0x187/0x280
[  624.245613][T21715]  skb_page_frag_refill+0x281/0x590
[  624.250825][T21715]  tun_build_skb+0x24b/0xf30
[  624.255435][T21715]  ? tun_net_xmit+0x16b0/0x16b0
[  624.260298][T21715]  ? __lock_acquire+0xc1e/0x56e0
[  624.265262][T21715]  tun_get_user+0x7fa/0x35b0
[  624.269875][T21715]  ? lock_acquire+0x1f1/0xad0
[  624.274562][T21715]  ? tun_build_skb+0xf30/0xf30
[  624.279334][T21715]  ? tun_get+0x160/0x280
[  624.283596][T21715]  ? lock_downgrade+0x820/0x820
[  624.288471][T21715]  tun_chr_write_iter+0xba/0x151
[  624.293420][T21715]  new_sync_write+0x422/0x650
[  624.298111][T21715]  ? new_sync_read+0x6e0/0x6e0
[  624.302904][T21715]  ? security_file_permission+0x239/0x470
[  624.308637][T21715]  __vfs_write+0xc9/0x100
[  624.312982][T21715]  vfs_write+0x268/0x5d0
[  624.317238][T21715]  ksys_write+0x12d/0x250
[  624.321578][T21715]  ? __ia32_sys_read+0xb0/0xb0
[  624.326352][T21715]  ? do_syscall_64+0x1c/0xe0
[  624.330955][T21715]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  624.336946][T21715]  do_syscall_64+0x60/0xe0
[  624.341372][T21715]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  624.347272][T21715] RIP: 0033:0x416661
[  624.351161][T21715] Code: Bad RIP value.
[  624.355228][T21715] RSP: 002b:00007efcfa64fc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  624.363640][T21715] RAX: ffffffffffffffda RBX: 0000000000509660 RCX: 0000000000416661
[  624.371614][T21715] RDX: 0000000000000046 RSI: 0000000020000000 RDI: 00000000000000f0
[  624.379594][T21715] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  624.387573][T21715] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003
[  624.395550][T21715] R13: 0000000000000bff R14: 00000000004ce559 R15: 00007efcfa6506d4
10:15:46 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:46 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x210, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
acct(&(0x7f0000000100)='./bus\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x1410, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}}, 0x4000001)
read$eventfd(r3, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000140))

10:15:46 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200), 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:46 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100090, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)

[  624.503804][T21717] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
[  624.571145][T21729] smc: net device dummy0 applied user defined pnetid SYZ2
[  624.618193][T21726] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:46 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:46 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2000040, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0xc8003, 0x0)
fchdir(r0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x9, 0x14, [0x2, 0x3, 0x6, 0x2, 0x6]})

10:15:46 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x3, 0x5, 0x100, 0x0, 0xe})
acct(&(0x7f0000000100)='./bus\x00')

10:15:46 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:46 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000140)={[0x3ff, 0x0, 0x2e, 0x3, 0x8, 0x800, 0x9, 0x78, 0x20, 0xf62, 0x4, 0x3f, 0xffff, 0x5, 0x10000, 0x410, 0x5, 0x7, 0x44a, 0x0, 0x3, 0x2, 0xe0, 0x2, 0x4, 0x4, 0x6, 0x1, 0x3ff, 0x7e7, 0xbf5, 0x0, 0x1ff, 0x2, 0x0, 0x27da673, 0xfff, 0x5, 0x3, 0x36db, 0x1000, 0x1ff, 0x3, 0xffff, 0x100aea5c, 0xa4f, 0x0, 0x7, 0x3, 0x3, 0x1ff, 0x8, 0x3, 0x3, 0x101, 0x0, 0x0, 0x7, 0xf8, 0x7ff, 0x2, 0x6, 0x800, 0x8, 0xffff0001, 0x101, 0x1, 0x80, 0xff, 0x6, 0x0, 0x9, 0x8, 0x2, 0x7, 0xffffffc1, 0x7fffffff, 0x2, 0x2, 0xfffffffa, 0x7, 0x8, 0x6, 0x9, 0x4, 0x4, 0x2, 0x10001, 0x7, 0x3, 0xc6, 0x401, 0x6, 0x101, 0x52, 0x486458ed, 0x8, 0x8, 0xdc9, 0x7, 0x0, 0x754, 0x1, 0x80000000, 0x6, 0x1, 0x8000, 0x7, 0x9, 0x20, 0x6, 0x3, 0x7fff, 0x6, 0x9e, 0x6, 0x3, 0x1000, 0x9493, 0x6, 0x20, 0x800, 0x4, 0x5, 0x584, 0x400, 0x100, 0x7, 0x1, 0x9, 0x80000000, 0x7ff, 0xfffffff9, 0x4, 0x9, 0x401, 0x10001, 0x7fd, 0x4, 0x9, 0x8, 0xc1a, 0x8, 0x7, 0xed1, 0x8001, 0x3, 0xffffffe1, 0x0, 0x10000, 0x1, 0x6, 0x2, 0x0, 0x4, 0x8, 0x1, 0x47, 0x80000000, 0x22b7, 0x7, 0x7d8, 0xf1a, 0xfffffffb, 0x5, 0x121, 0x3, 0x82c, 0x0, 0x0, 0x6, 0x6, 0x89, 0xffffffb5, 0xfff, 0x0, 0xb1e, 0x8, 0x8001, 0x9, 0x4, 0x4, 0x3, 0x2, 0xffffff80, 0x2, 0x40589dc6, 0x5, 0x81, 0x4, 0x5, 0xdc8, 0x101, 0x20, 0x7, 0xfffffffa, 0x2, 0x8, 0x0, 0x0, 0x6, 0x0, 0xb0c, 0x2, 0x0, 0x7, 0x8, 0x2, 0xfffffffd, 0xdade, 0x14, 0x7f, 0x3, 0x9833, 0x1000, 0x7a99, 0x4, 0xca, 0x4, 0x9, 0x0, 0xf365, 0x7fff, 0x1000, 0x800, 0x4, 0x5, 0x7, 0x401, 0x0, 0x9, 0x0, 0x2, 0x3ff, 0x1, 0x6, 0xfff, 0x883, 0x2, 0x7fffffff, 0x8001, 0x5, 0x7fffffff, 0x6b, 0x8, 0x1, 0x1f, 0x2, 0x6, 0x4, 0x8, 0x0, 0x1, 0x0, 0x3, 0x7, 0x9, 0x7fff, 0x7f, 0x6, 0x5, 0x6, 0xfff, 0x7f, 0x9, 0xffff, 0x8, 0x9, 0xfcfe, 0x101, 0xf5, 0xffff, 0x1, 0x2, 0xffffffc0, 0xce5e, 0x9, 0x1ff, 0xd0bf, 0xfc, 0x80000000, 0x7, 0x7fff, 0x0, 0x9, 0x0, 0xd062, 0x6, 0x3, 0x3, 0x10000, 0xbef7, 0x1, 0x80000001, 0x68, 0x8, 0x1, 0xfffffffd, 0x4, 0xaef, 0x5, 0xf1, 0xfffffff8, 0x1, 0x20, 0x5, 0xffffffff, 0x2, 0x7fffffff, 0x5, 0x5, 0x1, 0xee, 0x5, 0x8, 0x1, 0x0, 0x10000, 0xca6, 0x71, 0x1, 0x0, 0x8, 0x4a78, 0x3, 0x7, 0x0, 0x5, 0x0, 0x4, 0x3, 0x7dde, 0x2, 0x4, 0x4, 0x68, 0x3, 0x22, 0xffff, 0x7, 0x7, 0x4, 0x7, 0x4, 0x100, 0x1, 0x6, 0x7fffffff, 0x9, 0xfffffffa, 0x101, 0x3, 0x1, 0x5, 0xc0000000, 0x2, 0xffff3745, 0x3f, 0x1, 0x5, 0x3229, 0xfffff59d, 0x77, 0x0, 0x7f, 0x7, 0x982d, 0xfffffce6, 0x8, 0x3, 0x24000000, 0x8, 0x15f, 0x40, 0x8, 0x3f, 0x1, 0x9, 0x0, 0x101, 0x1ff, 0x8, 0x5, 0x7ff, 0x6, 0x80000000, 0x7fff, 0x8, 0x8, 0x2, 0x3, 0x1ff, 0x80, 0x5, 0x5, 0xf4b, 0xfff, 0x81, 0x8000, 0xd6d, 0x0, 0x5, 0x1, 0x1, 0x7, 0xb90, 0x7, 0x40, 0xddd, 0x80, 0x1000, 0x80, 0x3, 0x0, 0x3, 0xfffffffb, 0x400, 0x5, 0x27ff, 0x81, 0x9c4, 0x4, 0x3, 0x8, 0x1f, 0x723, 0x80, 0x3000, 0x7, 0x96e, 0x9, 0x9, 0x3e5f, 0x7, 0x80, 0x7fff, 0x4, 0x0, 0x2, 0x6, 0x7, 0x200, 0xff, 0x7fffffff, 0x9, 0x6, 0x7f, 0x1, 0x7ff, 0x6, 0x0, 0x7, 0x3a, 0x0, 0x1f, 0x2, 0x3, 0x1, 0x6, 0x6, 0xb28, 0x5, 0x7f, 0xf8000000, 0x5, 0x8000, 0x3, 0x8, 0x989, 0x3f, 0x8, 0xffffffff, 0x4, 0xfff, 0x9, 0x4, 0x4de, 0x401, 0x3, 0x7fffffff, 0x10000, 0x3, 0x2, 0xfffff001, 0x8, 0x1107, 0x4, 0xfff, 0x7, 0xf0, 0x0, 0x9, 0x8000000, 0x5b9c, 0x7fffffff, 0x800, 0x7, 0x400, 0x9, 0x4f5bb79b, 0xeb, 0x7, 0x30, 0x5, 0xbfca, 0x4, 0xd, 0x0, 0x31800000, 0x94, 0xfffffffd, 0x5, 0xbae0, 0x1, 0x19b2, 0x7, 0xffff, 0x200, 0xfff, 0x6ca, 0x8, 0x8001, 0x5, 0x9, 0x6, 0x7, 0x7, 0x8, 0x0, 0x2, 0x0, 0x800, 0x6, 0x8, 0x9, 0xffffc5d7, 0xfffffffc, 0x0, 0x8, 0x0, 0x7f, 0x4, 0x4d, 0x9, 0x5, 0xffffffff, 0x9, 0x1ff, 0xc21f, 0xffffb6be, 0x2378, 0xb07, 0x1, 0x1, 0x6, 0x9, 0x9, 0x9, 0x63fca05, 0x9e6, 0x3, 0x100, 0x22, 0x0, 0x10000, 0x7fff, 0x80000000, 0x1, 0x4, 0x101, 0x7, 0x20, 0x1ff0000, 0x5, 0x1f, 0x9, 0x7, 0x8, 0x2, 0x3ff, 0x0, 0xea, 0xfffffbff, 0x4, 0x2, 0x1f, 0x9, 0x9, 0x3, 0xaf8, 0xfffffffe, 0x1, 0x1, 0x781, 0x1f, 0x5, 0x9, 0x5, 0x34c8, 0x451e, 0x3, 0x8001, 0x9, 0x10000, 0x0, 0x3a40, 0x3b, 0x8, 0x6, 0xffffffff, 0x401, 0x2, 0x22, 0x4, 0x1, 0x2, 0x5, 0x8, 0xaed, 0x6, 0x3, 0x3f, 0x1, 0xffffffff, 0x1000, 0x7d8d, 0xffffffff, 0x80, 0x4, 0x80, 0xe4d4d002, 0x1, 0x32, 0x7fff, 0x4, 0x9, 0x3, 0x6a25, 0x5, 0x81, 0x4, 0x2, 0x0, 0x3f, 0xfffffffb, 0x7, 0x5, 0x5, 0x3f8, 0xfffffffe, 0x7, 0xfffffffe, 0xe3, 0x1, 0x9, 0x1, 0x4, 0x2, 0x3, 0x8001, 0x3, 0x20, 0x6, 0x4, 0x4, 0x9, 0x8, 0x7f, 0x5188, 0x1, 0x3f, 0x0, 0x1, 0x75a00000, 0xd536, 0x9, 0x3ff, 0x9, 0x8, 0x6, 0x28b, 0x0, 0xd5e, 0x6, 0x7, 0x0, 0x401, 0x7fff, 0x1ec252e5, 0x7fff, 0x6, 0x12468330, 0x7, 0x1, 0x6, 0x9, 0xef31, 0x800, 0x6, 0x10001, 0x5, 0x1ff, 0x5ac, 0x1, 0x1ff, 0x81, 0x5, 0xec3a, 0xc8f, 0x7, 0x8, 0x3ff, 0x100, 0x0, 0x1, 0x8000, 0x7f, 0x7, 0x8001, 0x7, 0x7, 0x3, 0x88a, 0x80000000, 0x1, 0xffffffff, 0x7fffffff, 0xffffff7f, 0xfffffd9e, 0x288, 0x1, 0x0, 0x3, 0x5, 0x3, 0x400, 0x6, 0x4, 0x0, 0x2, 0x2, 0x6, 0x0, 0xfff, 0xff, 0x20, 0x100, 0x0, 0x5, 0x0, 0x78e4, 0x7f, 0x0, 0x6, 0x800, 0x2, 0x6, 0xf5, 0x6, 0x2, 0x5, 0x80000000, 0x3, 0xc23, 0x6, 0xffffffff, 0x7, 0x4, 0x4, 0x10001, 0x2, 0x8f, 0xfffffffb, 0x4, 0x3, 0x0, 0x300000, 0x3f, 0x3, 0x7, 0x1304, 0x80000000, 0x5, 0x4b, 0x3, 0x0, 0x3, 0x80, 0x0, 0xd3, 0x1, 0x8, 0x2, 0x7fff, 0x6, 0xc844, 0x1000, 0xffffffff, 0xd68e, 0x10000, 0x1f, 0x2, 0x8001, 0x4, 0x401, 0xfff, 0x6, 0x6493, 0x7, 0x9, 0x5, 0x4b, 0x1, 0x3f, 0x7, 0x2, 0x4, 0x0, 0x5, 0x8, 0x3, 0x1e6, 0x200, 0x9, 0x1f6a, 0x4, 0x3, 0x7fff, 0xa3, 0x16fb, 0x2, 0x2, 0x10000, 0x775, 0x9, 0x200, 0x1000, 0x5e8e, 0x6, 0x2d, 0x2, 0x7, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x3f, 0x1, 0x0, 0x40, 0x9e, 0x7, 0x3, 0x5, 0xb843, 0x100, 0xfffffff9, 0x2, 0x3, 0x400, 0x100, 0x5, 0x40, 0x800, 0x36, 0x7c000000, 0x6, 0x5, 0x620ec11d, 0x6, 0x2, 0x2, 0x6, 0x1ff, 0xe1e7, 0x8000, 0x61, 0x1, 0x200, 0x3a23, 0x101, 0x7ff, 0x4, 0x9, 0x7fffffff, 0x9, 0x3b0c, 0xfffffff9, 0x8, 0x5, 0x5, 0x1, 0x2, 0x3f, 0x800, 0x1, 0x895e, 0x7fff, 0x1, 0x4, 0x2, 0x4, 0x6, 0x7, 0x0, 0x5, 0x401, 0x3, 0x6, 0x1, 0x4, 0x0, 0x55, 0xfffeffff, 0xbe30, 0x8, 0x3ff, 0x1, 0x6, 0x10001, 0x5, 0x2, 0xffffffff, 0x3, 0x1, 0x61000000, 0x9, 0x1ff, 0xff, 0x1, 0x2, 0x1, 0x10000, 0x9, 0x7, 0x0, 0x3, 0x6, 0xa6a, 0x5, 0x10000, 0x800, 0x200, 0x0, 0x7f, 0x9, 0x1000, 0x8, 0x3, 0x9, 0x7, 0x5c3, 0x4, 0x7, 0x0, 0x1ff, 0x401, 0x401, 0x800, 0x0, 0x3, 0x10000, 0x1, 0x7fff, 0x647a, 0x80000000, 0x3ff, 0x7fff, 0x7ff, 0x3, 0x3, 0x3, 0x1000, 0xfffffffd, 0x2, 0x8, 0x80, 0x5, 0x7, 0x8, 0x9, 0x3, 0x7, 0x0, 0x2, 0x7ff, 0x9, 0x20, 0x5, 0x5, 0x3, 0x6, 0x0, 0x2, 0x400, 0x9, 0x1fb, 0x7, 0x986, 0x2974, 0x1ff, 0x50, 0x6e70, 0x5, 0x7ff, 0x1f, 0x672, 0x6, 0xcfb3, 0x0, 0x7ff, 0x8, 0x80000001, 0x7fffffff, 0x4f, 0x5, 0x5, 0x7, 0x3, 0x81, 0xfffffff9, 0x8001, 0xfffff452]})

10:15:46 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:46 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:46 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:47 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:47 executing program 5:
syz_emit_ethernet(0xd, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:47 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:47 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
open_by_handle_at(r1, &(0x7f0000000000)={0x84, 0x6, "9fd3d55410314e0da90ee47393ca167ab50152163f82851eb79182c76cb7690a47040f5dcd97a03e7ccdb9b40c1780f981ed07150b699ec2fc39ed8c664dbf224862d04102a6d881c0e28f9f8bec468ff1a7c2dc5dd1fe893ab8023f9ebf0b9eacf393d110a1a3f225e56d0d86f5ed4385ef146a7910e7520a41368f"}, 0x200a80)

10:15:47 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x639bfb109d71c151, 0x0)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000140))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
eventfd(0x3)
r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)=@builtin='builtin_trusted\x00')
r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r5, 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r7}}, 0x18)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r7, 0x66d20000}}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r3, 0xa})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2, 0xa})
keyctl$reject(0x13, r1, 0x5, 0x8, r4)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:47 executing program 5:
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:47 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  625.547310][T21777] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:47 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
acct(&(0x7f0000000100)='./bus\x00')

10:15:47 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0xe)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2c2b40, 0x1ec)
fchdir(r0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000000))

10:15:47 executing program 5:
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:47 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:47 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:48 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:48 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000140)="fbbf159e4f24988f359d5063304b979dcc61e4764eb738b48688cde58a04720b1834efe69e8690dd985310645b7e24cdece5196761c553b7de715dc52c815abd9f1a45f4f1a91c89c7eb88f3eb6889c5dd83560912fb31a104e8be6bad91dde3c8eac77e89c0bb0d658380d3488ba8b83772c93e02a5f5", &(0x7f00000001c0)=""/222, 0x4}, 0x20)
acct(&(0x7f0000000100)='./bus\x00')

10:15:48 executing program 5:
syz_emit_ethernet(0x20000046, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:48 executing program 1 (fault-call:7 fault-nth:0):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:48 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x1a)
fchdir(r0)
prctl$PR_GET_TSC(0x19, &(0x7f0000000080))
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x81, 0x5, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x291})
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
socket(0xa, 0xa, 0x2000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0xd, 0x4)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000002", @ANYRES16=r3, @ANYBLOB="00042abd7000ffdbdf250c000000050008000200000005000800040000000800090001ac0f00"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x10)

10:15:48 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
connect$caif(r1, &(0x7f0000000000)=@dbg={0x25, 0xff, 0x7d}, 0x18)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0)

10:15:48 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:48 executing program 5:
syz_emit_ethernet(0xfffffdef, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:48 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:48 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x3f00, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  626.540571][T21834] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:48 executing program 5:
syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:48 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:49 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:49 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x3f000000, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:49 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b0804bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:49 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x10000)
sendto$inet6(r0, &(0x7f0000000040)="cb43067b5af289734cb1c45710a30f2466d7bf92439de5a68bc2e860523943c7264a1863aa6102baa93ad7dac9d48f081679848187f9c8f8b213ae3e9db43ef7c1b16b5b7e913470d774d4a7a22ca32c4ea3dab7ce4c03c5a64109434213830f7e952569cbff5aef33049a25c57325cf3f51044798d5246a669ce82757e81ed3f7710ae9f1536aa85b7cda69ab45e23855278125fb6caa111caf19d8a030e0fadb841ca40354472922912abfcd8525012e2576c9218dd3b9b925eb6cf39281a3312039e4a440b70647288890e5899a85e7485b2970574b61a09ea9c1362288863bea425e0f450e76", 0xe8, 0x8001, &(0x7f0000000140)={0xa, 0x4e21, 0xffffffc1, @dev={0xfe, 0x80, [], 0x12}, 0x6}, 0x1c)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x200001, 0x0)
get_robust_list(r2, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000380)=0x18)
fchdir(r1)
write$capi20(r1, &(0x7f0000000400)={0x10, 0x80, 0x0, 0x80, 0xc6c2, 0xed34}, 0x10)

10:15:49 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="0002020000000000fc010000000000080000000000000000cf0b89de08886ceeaa39092db6481a12f51bc4d8e749fe456c78accb9f5b2fb13628957f29b16bfdb577fa9e19013cf1e7cea1e26c7d879341284f5539a924559dd96721c50bd329964bd0c7f4bc3824574142ca3d7851ce9901182188cc690911585bfdb17527d79cde812648d7a76f3f"], 0x18)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0x100, @local, 0x400}, {0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x9}, 0x5, [0x876, 0xe2, 0x0, 0x6, 0x3, 0x9, 0x7, 0x7]}, 0x5c)
prctl$PR_SET_DUMPABLE(0x4, 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800, 0x0, 0x10000000, 0x0, 0x0, 0x800, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000002c0)={0x80000000, 0x8, "2aaa8149e645ce81d45258dabf07a94481d52488298a943f0492c68e9c7f912a", 0x4d4810d6, 0x3, 0x200, 0x9, 0xbf36, 0x5, 0x8, 0x2, [0x9, 0x7f, 0x4, 0x6]})
acct(&(0x7f0000000100)='./bus\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, 0x0, 0x3c7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x70)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r3, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=""/103, 0x67, r4}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r4, 0x4)
pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='./bus\x00')

10:15:49 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1002bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:49 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbd2, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x7, 0xffffffffffffffff, 0x9)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00')
acct(&(0x7f0000000100)='./bus\x00')

10:15:49 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x3f00000000000000, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  627.458741][T21884] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:49 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1003bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:49 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:49 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1006bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:50 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:50 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2801, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000140)=0x3)

10:15:50 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1008bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:50 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:50 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000240)=0xffff0001)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0xc40, 0x104)
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x100000000, 0x0, 0x0, 0x2a400, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59)
openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x80140)
fchdir(r3)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0), 0x4)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r4, 0x0, 0x0)
renameat(r4, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00')

10:15:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:50 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x300, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:50 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./bus\x00', 0x20000, 0x88)
socket$inet_icmp(0x2, 0x2, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

10:15:50 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0xb, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:50 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$qrtrtun(r1, &(0x7f0000000300)="61398d5d8d2988f6107d657e5665f5abb70203e623ee1c5acb872e83ba0e6c7cfbe35423dae9accf5ac7a23aac8b12d673147f6b984a0492829afc9fd4de6e08495fd32cd5d26eefcc5a9ac6fda1156e55d807c3b466d058f2bef68912c77506ef10960f880c213319a35da2a361727834790e825284eca76afddc63ee402c3ac8210f941ec311dddc4a410be5296f2af4d078d771a12ef020a085cc1cedfb0b22a854c6203c70477c2119ee045ccfb7204ceb84c66ad3e2927df69ca733c63af8fce5ca086b5c37ece45db383b10f73042390746e4e91b70107b7bd03005cea2051a405ea3e0344ac2ea096b18a45ac17e89d763537a0805a625d06092262e27c88ebc47c63bb4d8589f564dfa24e7dd63d005fae6588e4851db54b5960faf0eb48fbc83ad6406cee270d1497d93287d1a7c53304aeb6b92425edb11947029659fcccf2c8d22c16e820c647f5fb15dd23ac6f55eef43dda2a50ed42f831a2a85437680d965c5b8fa04f0a745569bc2ba866a2100a54b7abf46720516ca7065d35b47e82d3af92838be8c5273fc9d71ef8d6bca449441816a4ceea3b51f5d03b50ada001da6da903daef604640c023fae588a128ef625c06281132f17199403e158aedf79b34df2da04b093a85c2af6469fcc5b5d389df4ac499c0fce125b21cea1dfa1bb032033cd4670d1ebd7d7acfebf2006a84263e50eda7272e254c12f855cca41be9ec2c1f6487118cc022afe9c24d35b70f4f582909dd1180504a24e04bb216bea202bd6ab4480860c7273e86e02a2ddf20f3f03a5ab87e28578385a889cdd7a362d39d8dcd0565a9c78010ab0f6548fc930e593cd5e691b4cad1047716b009fd7f76ea4e578fce44a8eddd5aab581e8bfbb3b62616ced2c483c2e5b70efd8a7dfab624117397a1cddc7e7d7972b41f16ccd841151d87879a05add2217ecc039277b833e4703f95e8dd6764251358705468aac69bc2d078720eb6c7120b7c972a34119575aa86b3d653e31175b8230d3f7b87dc492b7daef77bb1fc78857991e379e467bb9505a4a6255050a7ed62f46bbcdf2224dc5a34290bb9899c7740b820a6f46ebb7106962b8af404334540506a86bccfbf9c5b23b9bf865da7e5a7173e226b87450d6691953260be2904dc27850d33babf716b050c6024125fd7842f171e24379d68fb4f2fb39d2f9c9027440dda0354f7ef2b0b6ecc29638c33fa29c45f4f5bdec5ca4b7056184fdab51610b862085a706c0dda28a5a3ddc8a3a62058623c20a54d24e36a9eb549b75ed4308e2cb06f48366048ba15de14d6753ea7e7e8f9ef2a36e3ce7d961b8bf5ceee22f187b5925e355e828d19800fb85d7c6607b1c33a66ebcc45cddccae17079ae8da27febbd8adccbd7207d5940462936a6e0ee0e0b6731f0a4edc153d0f44e421edb2891fa0b8a8041f69cf58ca1548d64ced966e3fd133da175ea2eb46e241968a88202fb97cda4f807c5cb331abd3237eb9f65ea700aa696a97b6feac7a4ab5deac801b64bdfce6272bae47ca846fef7d8b710708f277e8ac389daf3fe51d7eeb43e5d7424449029747cc696856935432dfa0723b87e00b8cb917c1325da69b13814b87864bcd74b9bbb7af99b8dccd5b2ba20720eb8756da250e329bdf3d086414b52777b5ecb4d3bed235ed38435789362c93e3d4d9b0a103b2589233bbe3a3af54235c410c798994f9a92a1a6d7eba2687104eaed03a22a7bf6daba117b0861bb68ea5035be90c88fc181f06d032b8758a3fc30227e98b49efad3b2fb484d73b8302329efb98baa9b94754fc152d596935b766b4b20681f5d001b9ff9c5e2cd799f01a5cd8bb0af2bb241bfebbc449db91877a51d817a4cead740eb3eca72b3737bae15eeb89d115a77e77040368ed6cf2fbd4b51837487c30b8b6a0b3a6ab4b7d9344de95ca8957d12776b3e0af894a8ac18e52bdabcb46981f9dbc5b99fc9eac9c6c014a2ba7751ee23f8ccf1a8d4a49bfe86cb4d6c7dfb79a4fd77b551e2e675e0e47abe81cec76243004222e8a56582efe077adfb00d81dc0effbc8435296b6c02d69590ad73a9eb2bd1d64829a8a5120fb8f5b38efb19e7547b8b68f4eaac3e170f7c82c47cd58bf7d6131d36a9edc0e387418282e7ed978e0c59d925738c8ec33916a38ad92b2d149f1a230366ca75b590dbe3621c5268a433de3445c4b26b9abc9cdad819f6cb9781b60cd9490b306ed7113598c790d22ba6e785ec38976a25470f4a1f8a62b1e6922e4ab61c17fe3e00693a65f652b6c36b35f11b668ca3b47cb9279117d4facdff76f09441a9bd7488a8bd193c431819c84a7b27a96a343e68923e1827f9c9bb70efda53f2fd43ad166aa4b35e73cb5c7a42adc71d55ae7dd552ec027627821eafc6f8d08f35704076204810aa8ba6095d830d72602d9a73470a02277c76fa229243ff53d5aba6f3f2e21249b534dc38c27cf9d965203b6ddd3dbf7f369aa3902138d694a6f1dd29ae5646b7c2bf616b24ee7721fbc15586c04c2531651dcadfc163d30f52176063acf9b7b73d31cd50c072bdd2578a26c6b21a65785bb57c8301b2986acce4f10a7af6cf728787a27caf423c289fc7b043bab02dbe84dfbfe8fbe9affb76685a7c4d208a83ff279dd19b26f586492e4a9d299923d41f3db7a2e8889f5a512df35866834b1d71199efa6a4da3c82e31c40a5d33b3afd4506f16c58c8456c920e4861670470cc59bf88d98280b019bbdeea288903bca6adcfadf6fe3201aba192a63860c9b68433ede22c25672345e228a4ee630b9afe1c20259f9fd0c47fd21bbfd20e2d548bf9c14a68e3c409df07207a83e2e89976897646907ed0a342325089812a3f59f36c0ea8b1b764704fc04f014c58663332df6ff758d5368dd8a2acf6cf19ffc22c3412cba9c45990c7abe1a36f93d973b51185daf3718ac66777999efcc75a950924309f80e7ab78306fb0c00770dcb4c48137f889fbc88d60650ab37953d4305ac2c5dbc32d50f2378052b9392f0ab63bf2c3c2cfbce2a6c50ced3eb791cfb303687d1fb812cde641cbcc8bff5315b65144ca110b06726ecd36ea0ab2b82cc8b40b67c05fe5b78ccee33562b85509fc16f77829aabe2ee171999ebef1bb306221d11a0561550fe96a76dcda72cbdada33d3dfcdda9c2eab3ee0b9702e79359e5f309ebcaa47524b5b22160149f6f0afd32894785866890338b442f1e02d2e1e81b23f3eeabb5b42799c1a2edeb0eb67bb6b8ef8a520456c63a6c4576450da71dbed4004cf89ac5c8fb249e067703c778a9bd73bf0e8ba97ea821b21d191b775c603d51202c30f20186a2d7671d8be4effb45e33b20e50f5e74e414aa56cdc58e0bb98ea46716ee74a76bd76b73ba7eb823770c2f2015e4513ae868c89d5aa7e8958c8d0cafa99081e6879595f5de8556e5b30ad3ae19879b591db743b6b4a3e2ecb6b94062fc9fb6b483a25b6b4941515af09f77ef9e46ff2548bfa35c1fe48ef8fd591db1a1792745642715883f97155fd4c488eea4ab5fc4aac6342a67cb1eccdc38672b5d8b08f5a215e436ab432e365210b15738cbfde6a6b77694d66bd0993b06efbd916a2be169f6a7be4ead5cb5060353c1dbc06e30b43528ea8666f9aa94eba1e0c448a4e8b4bb3bb6febd98efb13dfa49f4e2b2eab711bef94c4c7704be6401fb4f19a9e0bfc9f03ba2a2dff3d496591d366515369f4afa1b031b1ba0d5d10eb177ea0b5374f8ea30c9f0f384fb3f1bf7cfe4789f76c8c90b6fed420950319874b9126f1f551f620634860900f33bb4254c00080b8067620b9f2f17a9ffab095e55ac9e96551e3e5171f0fc066c3f590cebd296075fbb3798ae5eed8db8bcd24cfeb1cf0450dc4293f783a3bb352a44ebec0dd9f6194f9022836fcd9d31c045b5bd18c80c8d6abb6585ccef5b6dece8de424a6e67964d4167032683e4b2580f0cdff5ba213cd24cd724a7cb481bc5a2c29bb883c5dd59126ab460ba6e656c18a4c06267dc0e6b51e69839a437a7629564cb7826b08fb7a2df00e4a092cb8be27f6eba94e44adbb12e04498f005c43fa6a8b72a4fe0fddccc32d8abe03e7b3320ec15dfed6d97d25f8c18ed1d490602303183e2477a8eb4df7d7d7bfc7853827a6cd88ef9d3d7d3fccc2e8870f8d0f30142e27ca80c162387d7d80e636522367f5175d96bae2e774ede07f1a6d9d3acbee5db41172bb0f74fc170ffcb59510a66ffb607a01eecb3ef20766825489e7dcf8315feca76d29799d4be019303841d9fe7c7df4519baf457eb7ea557098157e5f3d5861d5c3d111601978a99614be5fd56df8fee219e1a89aa8648184742a47ad53cf2af2e0d02e5cbbb3a0c8a13987444bc2fde7ecf2d141f1d9c09f32fe4acd50103712923295b9a1b6f670601e8df2ffd47dd8d663fe4e123f2af2a37cd31b4b5c914b9bb1608789d4e2ca073bf18bd4b7640ee4b79c0b607a4fc4074b850ddf3f9eb31c0267bc5fcb2966c03240e74bbd26d922d4924ca560b771058f822c99707396beec768c1949ed35638efa7f3dc8188a4ab1adeb205d74baccbb40ae6a2c9435f5dcf288090c2ff03e9bfc33d86917966b95304efd0a84e7e4b108764463ffe0cab7c69edf597fd286125c960a906f31c6cf2fae2344e11c6bfc67160e847974b8fdaad49dcf84551ba163d40bcbeec6f3f2229351157f15d56dcb4bb804004ead517a56e995e24a315677365f12c38bdf237425e06f6ed5e2e615735215c907378d1554b1cf77025f78a407d6182cc47d4da81b768102646d58ecc03d5e4c041617daf1749613dd5ab279a310f58dce1dd888953f452d0e9fba0e9d34687d41680712507c2ae8a5202fe05570470b9d2e6de90ff603f2c0c965a71c6f727da690c5a3a321560382fce80ee0d72e54ce72601a7ad5a84a49795df985f1d2c618681784cb65ee516c7e0eca01fc59036db32bd5c406ead0c05051af0471fcd0c071a98d1816bcd21a201c57c60f34012d6e0a8499775658fce1c6367acdd51130a40f4cad2f098b333fd3e18e73953f5c5c2deb9b53b83d218fe79fb1882d3ea9c668fe49935ddb14267bddb6ac2205ef19dc4381cd7bfa6c221e4ea8864bca30a548c0b005f99f9717bce491f1466754b67cfbcd3f17300f17cdd7d16047fde0958ebdc18420272722bd3e5ac93c4055f5cea28365f61a9807a25fdd724be86eae3c354448d01dce38170e4a6022506a344949142a4cba1b937afd4065a759addfb4179ab6ec7452ef5758a6e0dd4b441a9f13c5d24c48a6ffd0034a4d6879f08fd2f7944fb86251757ad9ce3d55e1badff422f545a5a268a8031c99419b1c1f701ad8358f304190f29148eac1a8d603a513e62278de2dd7a9a238f14672dac019d496ade3649bbc7bec356442d65f6bf251ea6cfaa3c457ee80724bab07db35395eb5f49783a86bbd7c2b682aafb3aa3f06a7fb442845cfc53ee2222aac12d0a6d07b12db3d5e808e8ea45938f58d810fd4e6e404e7160b938ed2e3166abb10526151999cc36c5bb07b91d3ad5f0ee1e2c8220ee70345fc94edf8e66ed97afda760259c2948305bfe7ee8bee045c7c792126215b3b7b5f0b45d9a5050293987f7499e0ad3914f19843772c368926bd6eb87cf9e2bc950d1abcc2795f52cd1615bf590886bf619a3697973243fcb3687d9187826e96cc7020b84081e26baa749b1e2549f202e5ac29898588ce05d383a8d692ace3971f11af6a9ada86d3f5f76d958b717887c512abfa893101fab414d20245f6c462dae051a65622", 0x1000)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)

10:15:50 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:51 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:51 executing program 0:
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:51 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0xf, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:51 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x4, 0x501, 0x6, 0x8, 0x8})
acct(&(0x7f0000000100)='./bus\x00')

10:15:51 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x600, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:51 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000000)=0x5)

10:15:51 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x700, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:51 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x802, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:51 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x803, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:51 executing program 0:
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:51 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x10, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:51 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x8040, 0x0)
accept$unix(r1, &(0x7f0000000080), &(0x7f00000001c0)=0x6e)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x844)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x80, 0x1, 0x0, 0x401}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200408c0}, 0x4000000)

10:15:52 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:52 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000))
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x6, 0x4)
acct(&(0x7f0000000100)='./bus\x00')

10:15:52 executing program 0:
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:52 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:52 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x12, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:52 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x1}, {r0, 0x1089}, {r4, 0xcc}, {r0, 0x10}, {r0, 0x8022}, {r5, 0x530}, {r0, 0x4000}, {r8, 0x200}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x8]}, 0x8)

10:15:52 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:52 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x807, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:52 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:52 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r3], 0x20}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000140)=0xe)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./bus\x00')

[  630.435083][T22040] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:52 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socket$unix(0x1, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000))

10:15:52 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x808, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:52 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0xa8102, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x3, 0x860a, 0xffffffff, 0x75, <r4=>0x0}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={r4}, &(0x7f0000000240)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100)=0x8, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3ff}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e21, @empty}, 0x10)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
get_thread_area(&(0x7f0000000300)={0x2, 0x100000, 0x0, 0x1, 0x3, 0x1})
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r5, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f00000002c0)='nomand\x00', 0x0, 0x0)

10:15:52 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:52 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x80b, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:52 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xdc, 0x1, 0x9, 0xb83, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10000}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xab}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x4, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020000000000fc010000000000000000040000000000bd5797ddf9ee75a4a3c3981dd4ed4cf78b4b"], 0x18)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)

10:15:53 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:53 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:53 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x824, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:53 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x838, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:53 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x3f00])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  631.431598][T22094] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:53 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
fcntl$setsig(r0, 0xa, 0x32)
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)

10:15:55 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:55 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000100)=0x4)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:55 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x4305, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:55 executing program 4:
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:55 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fchdir(r0)

10:15:55 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:56 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:56 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x6000, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:56 executing program 4:
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

[  634.221153][T22136] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:56 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:56 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000240)={0x0, @motion_det})
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:56 executing program 4:
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:56 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:56 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:56 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:15:56 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:56 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/slabinfo\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100))
ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000240))
r3 = semget$private(0x0, 0x207, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x0])
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xfd3)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r4, 0x0, 0x0)
ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000280))

[  634.719597][T22172] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:56 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:56 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x8847, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:56 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:15:56 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="b008040407700001fe8000000000000000000000000000aafe800000aafe8000000000000000000000000000aa00000000000000000000ffff0a0101010f16762ccee7cbe4e67989bd99a3c39c52ea367604a74f0f00"/108], 0x48)

10:15:56 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x8848, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:56 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:15:57 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x40, 0x4, 0x0, 0x0, 0x7, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0xc1, 0x0, 0x7}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000100)=[0xee9, 0x80], &(0x7f0000000240)=[0x1, 0x16], 0x40, 0x8, 0x3, &(0x7f0000000280)=[0x9, 0x5, 0x3a9, 0x7, 0x3ff, 0xea378fff, 0x2, 0x488], &(0x7f00000002c0)=[0x7097, 0x7fff, 0x800]})
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/486], 0x18)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={<r5=>0x0}, &(0x7f0000000640)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x77, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0xfffffffd}, 0x9c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={r5, 0xa5}, 0x8)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:57 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  635.182072][T22192] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:57 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:15:57 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x8906, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:57 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:57 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
r3 = getegid()
fchownat(r0, &(0x7f0000000000)='./file0\x00', r2, r3, 0x0)
fchdir(r0)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="0002020000000000fc010000000000000000000000000000ab8f303b9d424f161c7478fb9b8af565f59471e7cd300a22ef95efebdabdf390b584054d6273a0a3c37ea725afe1af2d2fa5e3e92f1030ccc9d6ac96aa99aaac7fb75d4b6d666fc0a163fec113b521a2cab92b19a923d9fede56d5fb195dd985cdc950952b46eeb364f69f74ed8af10897e57c097f582975cad19a163fac5d4b48c04802e95d4a80e7b8698408d8d016a8c5d422a86ef06a77e4fc3e2bf3d10723814f484764ff6dea66"], 0x18)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000000000000fddbdf25040000000800010000000000080002000200000008000100000000000800010000006f00"], 0x34}}, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}}, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40007}, 0x44)

10:15:57 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:57 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:15:57 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:57 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x3, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:57 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000100))
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
read$char_usb(r2, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:57 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x4)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0))
r1 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/185)

10:15:57 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x4, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:58 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  636.076148][T22235] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:58 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:58 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

[  636.179307][T22244] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:58 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000000))
fchdir(0xffffffffffffffff)

10:15:58 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000240)=0x6)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}]}, 0x3c}}, 0x4094)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x18)
ioctl$FIONCLEX(r6, 0x5450)
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:58 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:58 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:58 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:15:58 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000240)={0x3ff, 0x0, 'client0\x00', 0x2, "2d544ffd8851dc35", "e15b4ca29c17ced5b8a31cf9ab5460f169483c7685ebcf254049e7af7660ae93", 0x0, 0xa9f})

10:15:58 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="98d6339162c8f53a3dc07be728cef3eee1ef974d9558fd1d9b7d2968445cd06f71b7bdff6607c229804ff47334b99c7c3dde8a34badc700fb1c0cad9509c8af8f7e872f4cbeecb84a425297806fcdbbd1f795b8fbc931d38"], 0x18)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, 0x0)
setregid(0x0, r3)
lchown(&(0x7f0000000000)='./file0\x00', r2, r3)

10:15:58 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:58 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100))

10:15:58 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:15:58 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  636.999347][T22284] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:59 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x2, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:59 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

[  637.107437][T22295] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:59 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x3f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xaf8, 0x0, 0x0, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:59 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:59 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
acct(&(0x7f0000000240)='./file1\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000100)={0x3})
r3 = getpid()
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f00000002c0))
sched_setscheduler(r4, 0x5, &(0x7f00000002c0))
ptrace$getsig(0x4202, r3, 0x10000, &(0x7f0000000180))
syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x6c, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="38e72bea06ab0becae00bd67c09708182b663feafb7687ad95e425223cbb63d6e89571d6ca5ca7a85eda4dcdbcc1eb36", 0x30, 0x9}], 0x104080, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0x83000000)
r5 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000140)={0x1, 'lo\x00', {}, 0xe000})

10:15:59 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:15:59 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x3, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:59 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000100))
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r4, 0x400443c9, &(0x7f0000000240)={@none, 0x7fffffff})
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:15:59 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:15:59 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:15:59 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/sem\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
connect$bt_rfcomm(r1, &(0x7f00000003c0)={0x1f, @fixed={[], 0x11}, 0x1}, 0xa)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000480)=@secondary='builtin_and_secondary_trusted\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r3, 0xa})
r5 = add_key$fscrypt_provisioning(&(0x7f0000000100)='fscrypt-provisioning\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)={0x0, 0x0, "29c4f30d90495673f278378943a65b45ffbcd3bb9262906596e4d60500519444dc03dd94f6435c6ef5e8a3be641da2528e5140b948779e43d22db9f62181db63116d69ccad0aa6a0878da6066f1870005604bab6b5b0d2e99d8ba4573004f4acb10e73cdb3902080cfad39cad47233e07849bb67566996508e6f5360da11dea4de427484f189c629cbfb445d5b0a269f5f40720334e86248b0d2c893fa5beb34a255b61fc8a946b5adf22d25be23e21f9739c31b3b531e"}, 0xbf, r4)
keyctl$get_security(0x11, r5, &(0x7f0000000340)=""/72, 0x48)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  637.943216][T22329] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:15:59 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

[  638.015835][T22338] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:15:59 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x8, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:00 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:00 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:16:00 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:00 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:00 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:00 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0xfff3, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1494}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
bind$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102, 0x4}, 0x10)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0)
accept$packet(r2, 0x0, &(0x7f0000000280))

10:16:00 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0xa, 0x800, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r2, 0x105, 0x0, 0x0, {0x5}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa2}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r3)

10:16:00 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

[  638.862955][T22381] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:00 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:00 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x0, 0x2, 0x101}})
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:16:00 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

[  638.968112][T22395] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:00 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:01 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:01 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:01 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:01 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r4, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000240)={{0x9}, 'port0\x00', 0x44, 0x40, 0x6, 0x3f, 0x6, 0x80000001, 0x401, 0x0, 0x5dfbdc9d53b6866f, 0x5})
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x1f])
semctl$IPC_RMID(0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00020000000100766c616e000000001c0002800600010088090000040003800c0001de100000000100000008000500", @ANYRES32, @ANYBLOB="08000200", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
sendto(r5, &(0x7f00000000c0)="0017d3d1f15c6f59c0abea51da75c720bfa714398045d6728b41bba33c58de44494cd379e5", 0x25, 0x4004090, &(0x7f0000000380)=@rc={0x1f, @none, 0x80}, 0x80)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0x41, 0x8, 0x80000000, 0x401})

10:16:01 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:01 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x412182, 0x112)
fchdir(r0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KDSETLED(r2, 0x4b32, 0xe00)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x28, &(0x7f0000001a80)={0x0, <r4=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r4, 0x0, 0x8}, 0xc)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r4, 0x3}, 0xc)

10:16:01 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:01 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:01 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:01 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:01 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000100)=""/154, 0x9a)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  639.781297][T22429] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
[  639.798801][T22430] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:01 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:01 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:01 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x7, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:01 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:02 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x1000, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000280)={0xf000000, 0x6, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9909cb, 0xd2, [], @p_u32=&(0x7f0000000100)=0x4}})

10:16:02 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:02 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:02 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a2200"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:02 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="00000044839302c345ddd859"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080)=0xff3, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
fchdir(r0)

10:16:02 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:02 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xb, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:02 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:02 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x24, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:02 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

[  640.716955][T22489] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
10:16:02 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x0])

10:16:02 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, 0x0)

10:16:02 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x38, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  640.897532][T22489] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
10:16:02 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x2, 0x1, 0x10000, 0x2, 0x1, 0x4})
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r3, @in={{0x2, 0x0, @empty}}}, 0x9c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r3, @in={{0x2, 0x4e24, @multicast1}}, 0x4, 0x9}, &(0x7f0000000140)=0x90)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r4)
ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000040)=@netrom)

10:16:02 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, 0x0)

10:16:03 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a2200"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:03 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:03 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, 0x0)

10:16:03 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000300)={0xa, 0x0, [{0x614, 0x0, 0x9}, {0xb4c, 0x0, 0x800}, {0x658, 0x0, 0x80000000}, {0x9e7}, {0xb45, 0x0, 0x100}, {0x625, 0x0, 0x4}, {0xaf2, 0x0, 0x3}, {0xc001103a, 0x0, 0x9}, {0x379, 0x0, 0x40}, {0x2a0, 0x0, 0xfffffffffffffbff}]})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x80)

10:16:03 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:03 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000100)=""/147, 0x93)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
lseek(r3, 0x1f, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000fedbdf250200000008000200010000005c000c802c000b8008000a000000000008000a004ace000008000900428b2c7b080009000000000008000a003ad300002c000b8008000a00000000000800090000000000080009003f46ba01080009000000000008000a00f94f000008000100030000000800010000000000"], 0x88}}, 0x20000000)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4c2cceab2a67e68}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYRES64=r1], 0x27c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x0)

10:16:03 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:03 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:03 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:03 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_GET_SPEED(r2, 0x551f)
read$eventfd(r0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x15, 0xfffffffffffffffd, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000780)=0x1, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
sendmmsg(r6, &(0x7f0000000e00)=[{{&(0x7f0000000240)=@isdn={0x22, 0x1, 0x6, 0x51, 0x6b}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="52553d25f54db72ad5ffe4662e34403ba4ab397a2190867f4015bea601a7e7c1988ef6700c672ff1f874", 0x2a}], 0x1, &(0x7f0000000300)=[{0x70, 0x119, 0x5, "62ea349c00d400eb0df68670b91e9d73e3bbf8ac7c2ba76328d5320c26a56155cfd6fec6ea4204622dfdd98cac0a1c7f4b6918391e66e7f0cdb31322fca3ae602a58f9f71d86405d70195ef1acd870edcf22355ea3f6b249621ef9"}, {0xe8, 0x3fa820952d9eb890, 0x9, "a882c42e887a0a69a152020e568c04bf7e3d41015f4442f52e8a7ae0bf7c04fdf968885880e1a949a937977582ad4c6b335e074f11a3823975b17dc3b1775158884afe02697cddc2a692c1a8f88a2cf32b27e2c66c298af639289c4933b41fcf0803c48a4ade139f60ab4a33013c7828d64155afbec589cc9d7279cafb817dcbc3c1d45cb05be8fe68b46957570a9789b6a25b5777ee93f45125b8f3e6cfc9ba7e4e15aafe4f7fafd00a152f9d066319a75144a68dccb2e427654ebb73499c734fec7db4a4c0a944c19c1680a97d4e7714d0fe3b"}, {0x98, 0x111, 0x81, "61a65d6a54e43a48cb6a561ac3a4468c163bde1d878088b39dba5acdc10a2deb7e45e07afc5021aa8e92f2ca831fda713cbafa176cf30339d82e0b42c9b28f1b7e43d0fe0afe8d8f6762260bbe807359f8129ae5f744c9f02d24c5247da63dcc83b037642ca4a277e5f525f27725ac6a6e6197fc441cd7a99dc3aca5b8e50b8727dc"}, {0xe8, 0x115, 0x9, "206b65275477ef4cfc8fd663c8db17e602f1922191265b2188aa44e4f4cb4ae309793b0e4e26d52cfeb85c3891498d9140ae043752ed72963d5ac454dd04e69d09de2e0c1315e6b1628883f692af625a87e3bb6627c71e6ef9e20ad8d9751d7891722d02a2842db95950fa2366512295c1bf3cf478bcb7bfd4f2ab6fba96bd37536e2fca937b495e8a46dc22d427c5b804f84147601627eb140df142d13b2d3e88b9b7a91625a808502f5c474fefe7c1a181e5c5b4401d27154580af43f5ae56abe1ebad8265349db21e20893316c25164b87890"}, {0xb0, 0x104, 0x2, "119447b205e0c336fa9982268c37cf31a8b887bcf955ec339020774f8578fba0d10332bca48ac469de9012a4d07a25decc4b5024695f8fdccf702da5d97f9b5f509a934f5dc67f99756cc40be3ba95728efc5b5ad2c3594d283fa8db7b02cb52f1851b6ca1305f35b3dec0c750fd7d794d195229ad3610d89f30907527e3a1dde26397ff0c91a87d76dc3482afa74a533f19fa0e3ef0c477e0de15414f62"}, {0xe8, 0x101, 0x7, "142fad67e7fc95738aa3061c28ae19a82647ae09f5ad2cea5663bf6711e899a4bdb4b7c6f219a81ff6a087252d079694da4dc9f9741de46670903feff9fa95b27c82dc14f3af3d894fa74440644d53dfcf8982ec66ecf4893086f6ab448fccbd56f78b8809d330236bd39f749e8326a3b1f7e9a4d11bc9c1fc2cd8612d3610e64bfc147a895ea706e29bb5c1d822cd9467e88f9f3438dd4cea8accc47d617129c2c7b5f79506a36184ce40d11be076b6fda2106683c8afba64062108c44025f0496d5b808519c677f8a96b27f3c90d900315b90c"}], 0x470}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)="01adff249cc066d9f0beb9c3e55529219db8039eff877866a37294374992351c8c1699a3df96717ae0ab6560e928a5909be0096b518972bcc4017b11938134293cc3ff5a88d03100885c8e44dd477ace", 0x50}, {&(0x7f0000000840)="13b697c29ecb8fc6978712b428cf8bc34d339ec31cda6e07fb324f7ce372b64d7150748784ae45fbc1a315740bf7c89d3d5acf5e0f3b13ba42347e37f2a4a5f3a96a057ccada0e5d61f48c561db4a8ceac012645eb210ab0839daebe26e2772e0e6042942acd53565d8d7ca16e5a8802321a07af29674ea09e4f4245555d9ae134c11dea6e5ea4b5f5cb8046b2de17705080c99c9e52fa5873ecc21b5db173b511c1bce1f980b9987a2a6610b1b732ec2115ba8a878993", 0xb7}, {&(0x7f0000000900)="91ee17e0de7d70524199e575500f545734b2efa1362d70630a6b33fc16019092a364f975da3fd84cbb127445339dea7b56cad6f0d093e82b19d970393e4e9563bc2f6b39146330eafef814a2653ff2dcdd530c77b6269448384669e81fcfdf929650a5ed466ca16275ed26f4aa17819c8b986f7a46cb7c1fb85c841922cf9fc7c03e2225a0eee4eb64c50b3b266a1d019c90208c4962a86130f79572f905", 0x9e}, {&(0x7f00000009c0)="ba5eb348831c76fb9b63d0877b41c38ca7b8bc94f3b0ea753543", 0x1a}, {&(0x7f0000000a00)="fda2cee1eec139588bb4076e9c1df17e2695fa86d4211bf0d9bf4926be9f82108895401ec9d882c86739259ab76814f6844b4ef0526e98beb1253b453fa1879c3330ec3e327f4c9ad5b0b4eec364d57d3f22620f50890aa045254ad79f89d6d5dd95284f93665834d080ca8e34e3b67a08b29b67a51e6623ac34cc402b3abd2c4756a34993e381d4a9a1387c8d59438bbc1b1b0d30193939fff050d8e8d35b29244705", 0xa3}], 0x6, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x290}}], 0x2, 0x80)
ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000e80)={0x1, @raw_data="1ef8807a6e861b3a6159b0bbfebdbdd1f6fc485b98f6be8c5f0b6a615a3388b2ac7ededda0b4b9c6eceb9b90f4323a6d0271038d0e8631827b089dd36a787b49c56846d1f4acd37a44d1d6b633b6ee4c362239c0899a559d59dd4d3e51165adf3dce61ebef98e98db9f3802a8dea0358f6795786c2e75f2cabb6399d855456cd1481b47ca8012a506bd02344cb442736123fe0904f6effefae1f2184d837339f125b89ea9fea137ce2b18f7d3c94b306c011aaca075a56298564017ea3cecb30c2f039d4b98d698b"})
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])

[  641.736031][T22537] validate_nla: 2 callbacks suppressed
[  641.736041][T22537] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:03 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:03 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  641.801310][T22539] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:04 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a2200"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:04 executing program 2 (fault-call:2 fault-nth:0):
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:04 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:16:04 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:04 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:04 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup(r1)
setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000000100)=0x9, 0x4)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r1, &(0x7f0000000300)="0503c800c7013e0001c480a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x1000000, 0x0, 0x40ed)
creat(&(0x7f0000000780)='./file0/file0\x00', 0x150)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, 0x0)
setregid(0x0, r9)
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000240)='./file0/file0\x00', 0x80000003, 0x5, &(0x7f00000007c0)=[{&(0x7f0000000080)="ce1a60eefa1d68a968c6a4c5bc0681d23b9c75ff9577b20759063e0821e525f3bce09f4a73eeb9b67ee37255d9e2aad6ef45c5c74724d82f65ecc17563b5889afb1aa7868739e6a0fd0865b55dc2a55453c93dfd28615b30ff3f2830a7b730392b2fad0d1184e3fcec0191bbe2109ee6f42d1ae30f1f22b289e30c00bf530138a0438415b54320d561c7ecc17183c67b2d813e1125092cc331e904f8aa5d05b753a8", 0xa2, 0x7ff}, {&(0x7f0000000300)="06bd5794e140ae7abc88f093b2846879c58a8c47809e484d1bf802487aaa03ff14b34e0de6f36fd44f1af9af0ec50899accd207057ef64e551eb974d7a8cc0a1207e5592693475007092bd32105ea36dceb941d082eb4f0e064f568e96c0c0e3b0dc77c97e9279d81ee2c88cf7e33adfa652c8b04e8439dc518aaf99ace4f539fb4b7ea64486d5438c5e78e4dedc6f918e249273f30aed9863d709a9a9ffdd972e58664e63391ffe64bdacfebbc710347351e4b06ccade2cbed2c5b022d30d0c21ef22a636ad2f8732cc505178259116a4380c22c9849382f635aded9845e9", 0xdf, 0x7fffffff}, {&(0x7f0000000140)="fc8188e13c6d42bc46743d6e5fb06dd195a3335bb93c73cc0fb6f6c76094084dc0753801b4aa5b1a536ec778ed5068997692691de9c51d2925377c3c23e976c65d04e391e46ab82296e06856555f4df33b2f45da0831a9ebdd27833522d36c8dae569e2bd36dbee4e960113c43d573503bdc0360fd7962f0bba7e28c7b7b26789bffbcc9350eaae4e58535edf52f09212e5260c18d8db217e41fd8ed858248de", 0xa0, 0xfffffffffffffff8}, {&(0x7f0000000400)="18739be713b29bd6553317143bda12800f08f7c90737d2d036c33afa6c6803ce4a5315f82f0508395e53b7c967652fd6d9380dea323e067aa2be673c62292c134a2a1007cc2a6a0f267d403e0a2ea47489f911efcd9f73d848be7cd1c5c8abd579133c36ee1a26d2488209c1c7dc6a4a21fcd20014b304360e92cb95b6ea3bb3f4405eaef799c038fbce86bce4b0965dac0e50d816d44595b459a1883f9c4e013526f6d03d5c8aba4b73b927b2b9cb800e5752ec1dd18dce314d544e06cb6293f0d6d1e13bd92615623a37c6c61d4cc4a141f5f37df2", 0xd6, 0x1}, {&(0x7f0000000500)="66f3277a48ef632ac3c842719d483773380ebe9834921ce16403593c27016f8696265ee4058f30dde9679ac9247b01cb410e1b546e06041c88b20c6912662772df47e13a50d87ab45746d8208d52d1ba2d4bb3abc21d938aa8de261c27dfaeada145d529a2e95c6e6c1a5805515714215863285fc8d1558ea16df76d9e611e1b79bf33991b6c05fabb38d7af516826d1a35fd92edf619f6f0d188b90f480c588d811dd9c05ad3ecbf2dfc308d442ee68c3f65da216e6945b2620f3054b1ffee275c73b95b831195daa573bcb62463ace2954edd9b68b76fbf6fc863cd354f694f47612f44c", 0xe5, 0x100}], 0xc1, &(0x7f00000006c0)={[{@uid={'uid'}}, {@nodecompose='nodecompose'}, {@uid={'uid', 0x3d, r7}}, {@uid={'uid', 0x3d, r8}}, {@type={'type', 0x3d, "5afe3ff9"}}, {@nobarrier='nobarrier'}, {@gid={'gid'}}, {@type={'type', 0x3d, "bf21d016"}}, {@session={'session'}}], [{@obj_type={'obj_type', 0x3d, '&^'}}]})

10:16:04 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:04 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000240)=0x8)
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:16:04 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

[  642.608376][T22583] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
[  642.669399][T22591] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:04 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:04 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x6, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:04 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x3f00, 0x13, &(0x7f0000000000))

10:16:05 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a22000000000200001603000000400200"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:05 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000000)={0x9, 0x7})
socket$inet_udplite(0x2, 0x2, 0x88)
fchdir(r0)

10:16:05 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x75ea}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r1, 0x0, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r5], 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r6=>r5})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r6}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000280), 0x10)
read$char_usb(r1, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:16:05 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x7, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:05 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a2200"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x3f000000, 0x13, &(0x7f0000000000))

10:16:05 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x8, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  643.598627][T22635] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x3f00000000000000, 0x13, &(0x7f0000000000))

10:16:05 executing program 1:
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x3, 0x5})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x3ff)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4)

[  643.690050][T22640] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:05 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}})
write$tun(r1, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x2e)
fchdir(r0)

10:16:05 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xb, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x2, &(0x7f0000000000))

10:16:06 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a22000000000200001603000000400200"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:06 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000140)=""/151, 0x97)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x100, 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(0x0, 0x0, 0x0)

10:16:06 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x24, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:06 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x3, &(0x7f0000000000))

10:16:06 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a2200"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:06 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0xb, &(0x7f0000000000))

10:16:06 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x38, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:06 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:06 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x600, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  644.770700][T22683] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
[  644.796380][T22685] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:06 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20502, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8)
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000400)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x219011, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose='cache=loose'}, {@aname={'aname', 0x3d, '^-\'-*[\\'}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@loose='loose'}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@uname={'uname', 0x3d, '^{$&-(]'}}, {@access_uid={'access', 0x3d, r7}}], [{@subj_user={'subj_user'}}, {@obj_type={'obj_type'}}, {@fsname={'fsname', 0x3d, '%-'}}, {@subj_user={'subj_user'}}, {@euid_lt={'euid<', r8}}, {@uid_lt={'uid<', r9}}]}})
fchdir(r0)

10:16:06 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0xf, &(0x7f0000000000))

10:16:06 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x700, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:07 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a22000000000200001603000000400200"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:07 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x10, &(0x7f0000000000))

10:16:07 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xb00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:07 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = dup2(r0, 0xffffffffffffffff)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101140, 0x0)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x2, 0x0, {0xa, 0x4e23, 0x0, @private1, 0x6}}}, 0x3a)
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x24581, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00')
fchdir(r3)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001580)='/dev/vcsu\x00', 0xe8080, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001600)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x64, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_lib_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000082}, 0x4000)

10:16:07 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a2200"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:07 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x2400, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:07 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))

[  645.560435][T22733] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:07 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x12, &(0x7f0000000000))

[  645.620895][T22735] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:07 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3800, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:07 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r3, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40094}, 0x4800)

10:16:07 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3f00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:07 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000000))

10:16:08 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edff"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:08 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x4000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:08 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1})
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x14)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r3, 0x0, 0x0)
ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3)
fchdir(r2)

10:16:08 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9], 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xb0, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4810}, 0x2404c855)

10:16:08 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a22000000000200001603000000400200"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

[  646.360046][T22776] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
10:16:08 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  646.444740][T22784] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
10:16:08 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:08 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000000))
fchdir(r0)

10:16:08 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:08 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x2, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:08 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x3, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:08 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r1 = userfaultfd(0x80800)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3})
fchdir(r0)

10:16:09 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edff"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:09 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x6, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:09 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a22000000000200001603000000400200"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

[  647.397443][T22828] validate_nla: 2 callbacks suppressed
[  647.397453][T22828] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:09 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x7, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:09 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0002020000000000fc010000000000000000000004000000"], 0x18)
r2 = socket$pptp(0x18, 0x1, 0x2)
r3 = fcntl$dupfd(r0, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000000)={0x3, 0x8, 0x1ff, 0xffff7fff, 0x72c, 0x4, 0x6, 0xf09})
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r4)

10:16:09 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x8, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  647.555883][T22834] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:10 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9], 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xb0, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4810}, 0x2404c855)

10:16:10 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xb, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:10 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edff"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:10 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000))
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:10 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a22000000000200001603000000400200"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:10 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x24, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  648.307933][T22859] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  648.331550][T22858] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:10 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9], 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xb0, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4810}, 0x2404c855)

10:16:10 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)

[  648.486537][T22866] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:10 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x38, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  648.529662][T22872] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
10:16:10 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x300, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:10 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x7, 0x8000, {0x53, 0x1, 0xff, {0x0, 0x8}, {0x5fbe, 0x2}, @cond=[{0x1, 0x0, 0x6, 0x6e3, 0x4, 0x6}, {0x8, 0x20, 0x9, 0x8000, 0x4, 0x2}]}, {0x57, 0x9, 0xa5, {0x5, 0x6}, {0x3348, 0x3}, @rumble={0x8, 0x1f}}})

10:16:10 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0)
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000300)={0x9, 0x100, 0x81, 0xc2, &(0x7f00000000c0)=""/194, 0x46, &(0x7f00000001c0)=""/70, 0x84, &(0x7f0000000240)=""/132})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="550000001800fd0c00000000000081930a600000fca84302b10000003900090020000c00020000000d0005bdf28aa56a1e1ce275f8537899922b3149cfbb7e35fc425c6494547963d0a87e7f91b8f2172e93f70d056e261339d085262a5a5ece79b519ec1d3d0d4e0acbda4664de1e1b4746ead5b664d841", 0x78}], 0x1}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:10 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x600, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:10 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xa00)

10:16:10 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:10 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x700, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:11 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edff"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:11 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r0 = semget$private(0x0, 0x207, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semop(r0, &(0x7f0000000000)=[{0x4, 0x4, 0x800}, {0x0, 0x9, 0x1000}, {0x4, 0x7, 0x1000}], 0x3)

10:16:11 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xb00, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  649.247776][T22895] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:11 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x2400, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:11 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f00000006c0)='/dev/input/mouse#\x00', 0x0, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000700))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x4010, r1, 0x3)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

[  649.413771][T22904] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:11 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x3800, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:11 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}}, 0x84)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x208800, 0x4)
pipe(0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x220000, 0x0)
recvmsg$can_bcm(r1, &(0x7f0000000540)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000400)=""/121, 0x79}], 0x2, &(0x7f00000004c0)=""/124, 0x7c}, 0x10020)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r4, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/45, 0x8}, {&(0x7f0000000100)=""/5, 0x5}, {0x0}], 0x3)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000180)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x51)
ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000140)={0x5, 0x1})
ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000200)=""/90)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x200000)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000000)={0x0, 0x8, 0xc9, 0x7, 0x0, [0xe5f9, 0x0, 0x7ac13f77, 0x3f], [0x400, 0x80000001, 0x6, 0x5], [0x10001, 0x3, 0x9, 0x200], [0x1, 0x0, 0x1, 0x4]})
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:11 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x3f00, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:11 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000180)={0x2, 0x0, 0x7fffffff})
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:11 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000180)={0x2, 0x0, 0x7fffffff})
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:11 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:11 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:12 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edff"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:12 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:12 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000180)={0x2, 0x0, 0x7fffffff})
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:12 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
waitid(0x0, r0, &(0x7f0000000000), 0x8, &(0x7f0000000100))

[  650.174805][T22932] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:12 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xffff, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:12 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000180)={0x2, 0x0, 0x7fffffff})
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

[  650.391737][T22942] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:12 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:12 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000180)={0x2, 0x0, 0x7fffffff})
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:12 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:12 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000180)={0x2, 0x0, 0x7fffffff})
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:12 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:12 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  651.052485][T22961] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:13 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edff"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:13 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:13 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  651.280255][T22969] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:13 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:13 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:13 executing program 2:
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x20003, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x4, @perf_config_ext={0x5, 0x2}, 0xffe3, 0x7ffffffffffffffe, 0x0, 0x7, 0xfffffffffffffffd, 0x2000, 0x4}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000040)={@none, 0x8, 0x2, 0x4, 0x2, 0xffff, "376f0f497336e6bfc95c75c52aea7bae38f4ca758b5ae71e164a0099d843191f3874573921266c70ad4ad81b47aa0ff3d8711892080d84919b5f084414dc50f4f1f7bace6ba5ff3ab264f8a85d18ba32745ac471c83d46e6f3c0ce2cb56f70f912df4f693b69f26560fca0ff1a7f6d39df81d1486097b244121c8a694d9279c6"})
pipe(0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x400}, 0x8)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:13 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:13 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x8, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8002}}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:13 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:13 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff00000000"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:13 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:13 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:13 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket(0x10, 0x80002, 0x0)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:13 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x24, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:14 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:14 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x2, 0x100, 0x77, 0x8, 0x2, 0x80])
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x40, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x3}, 0x10)

10:16:14 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x38, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:14 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:14 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xc)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:14 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:14 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff00000000"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:14 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/109, 0x6d}], 0x4, 0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

[  652.917306][T23028] validate_nla: 2 callbacks suppressed
[  652.917318][T23028] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:14 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:14 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:14 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:14 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:15 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  653.161098][T23039] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:15 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000))
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x6, 0x4)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:15 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:15 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:15 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:15 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:15 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff00000000"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:15 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280))
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES64=r2, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRESHEX=r5, @ANYBLOB="08000a00bea8a561546fd3f5363d411aacf0112db123c5f8bad8e2da00c199c859874e38bcd13e7ac29382721ccba0846ceb008b10d88d03b39fd993bedad5404eb0cadf753b0704957e5d61c8940a6e20bdce92c434979559e6cd30692fd72edee3d7b2f898f8e5bc4ec3e100afcddc0a0e8fed99", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x20000000)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x6, 0x7, r3, 0x0, &(0x7f0000000140)={0x3b0370, 0x2fe, [], @value=0xfffffffa}})
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r6 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00009ba4752d655ef63ad47a9bb400", @ANYRES16=r7, @ANYBLOB="000027bd7000ffdbdf25020000000600280002000000050038000000000005002d0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000891}, 0x8000)

[  653.813222][T23063] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'.
[  653.851032][T23061] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:15 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:15 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x6)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:15 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:15 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)=[0x20])

10:16:15 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:16 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

[  654.086574][T23075] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:16 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x8, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:16 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:16 executing program 2:
perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xbd2394931248e5ce}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
pipe(0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VT_RELDISP(r1, 0x5605)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)=r1)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:16 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:16 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:16 executing program 3:
connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

[  654.707607][T23099] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:16 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff00000000"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:16 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x1, 0x3f, 0x0, 0x5, 0x3, 0x3b, 0x1f, 0x20f, 0x40, 0x1e0, 0x4a, 0x8000, 0x38, 0x1, 0x8, 0x1, 0x12a9}, [{0x1, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0xffffffff, 0x6}, {0x2, 0x7, 0x0, 0x1f, 0x100000001, 0x40, 0x8, 0x7ff}], "ee655a514c9ea3b6a9c92dd710c27f395c0f70d2653dd71c53951e2a6578dd29033b36bffaa35138e21e19a949e52333175de94d03e89fe2f2dca2ece6e7bb77be839acc0410a293fa4633ef98e386e72e869950f21ae6c972083e45583f2f9eb95cdef18041671701ab38bf028dfb42f573209fd5eb8b8851e40fae20ac9630c6eab06f4c7490fb67d94df133940caabf3cc94f31487ccfa4a049e27beb25bd37e9ce2e3e320608cd82cea59d257e1c8ec7c5dc0cabf7636b3a5765a72d17c3116615373c630d00f34d2544ef3da79c5dbd1b3a6ff97d2f1cb71b496353403d78597f0244ba900ca8a474ebd6c330ed0ec0dae30415daef77fb4ad59c92de7059e32421b5062e9161a1b908ea6c3a69872ab0e9fe10a9b70f69ccc3077f152aa273efe4eb03cd5a7d10c3e461a060af556dee7eb94d6bef959d905a3d3b91176340924c4e4c86d7134a04353412e2343022238e02e9113b79ed6d3eba9c1b996c99acc3aa58df7e5c913c78c5bccd86eb6a03cad1423273fa8f31321549f0f11e4bfc678491a003bf06282414e8430491b90eb51d41dfee15ec60670bfec6b9127c28e4aa34190c0e72136d19defe38992db4e9903a19ab28fe2a9c443c0ab1c17718bcdd4705b97ae0cf8944d2ea53f8447ab1510bc98eea318e6526c9c14dd9163b3a1e10105d94926e866f8f8189d342fb7265d19835350d022064da1d6762dbc57a26487c4013651519559a9463c5ff424414e30b906e42fda6e1d82009ef23d24170bb6d875699eff6ce8c1605b1ee5a7b1a91a3cc855affc3cbfe491eb6653d2b7ba04074f006ecde331b2fb32befe5a0e86ec7b78f2aa1dc36486dd0998a73702da59fbb04a6c57e003ad577a9dc6b1201827533147bbca1f0a3e5d0c2222afe6d237a159214397a18397d074f07980050237393df62f20e0cd05f01872c8512c6c0d5d93549dcf84a92e5f43fabcc1bfe91fd8b144db86bad487db894781e352bf8521b5761be2d293f7eff25e216eda869cf569e8a8eef35da03b13da9b3c725e20631683722c1fa33738089a3656c839bdfb4fede75ea71944db973a17139a56cda66b803b39f46e2f7ab2f28b7d2251eabe77b6bcbbd466c5ea5cada367fa822e4fede9486ede489757ec70b5d423aeeeb893e71e353490eca8f5e31f09e35ab9e4b70fa46d687fbec57df914841405690b76f3adb8870128b899750109aa61700295848338c4971b2f5fb4a737280d75daf24d16acdfd166478eb98c15715cedcf243d75f1d4151523b3eb0a0e44bd81310b2236f76b5aa50e047e154e74cd6fa87dde4982721ee048f24abba88fbd8fb4ec7a2879794662b528eec6f7774de105a1d51c57d287acf69229842f0775d6c4dab8894d4761a319c4b21499a7f496d8e5dc6aea2d779de946b4c5fd10904d01c1ec89e2ebfc1ec86fdb18710a09da7ee27114b8ec870cce7e7278a0274bf170265e39ff7dc5094b92247e595192bd726c74af40f9031c057e9448b888a72b1ce2f6cfaadb6a5d64e9402467b524a4b801badf852e3cb989dd15aa45570cee0d359721aaab0a4634f33a40b6f89bc97a41d8554312305765088d995257eb2a76e6b56ef1465697aa218cd8be42eed5eb34814c73859141c16674513dce8b99b624d439b2b1c8b6f09a07bdb1c848c4d03179f02a292e55d7cd02c813c55138d8ab27fc1ce6f8fbf9e1a981be82e9b9400f58d2188d26aded42ffaff70f9e91125d5daf3b6210e4b918b4c96af13f273fe61e402ac0df42180a4e4229abef3dc4df04fd5ba72377b65c0f15e2591dede0565fbc0e9c0a5b62c31c9cc86a19e29bc3bdf7df9d74528615f055db5fbc6da6e642310c9375a50b99b39348dfee98275b0553a2ae993e3fe009d0bb06a91a41906522ef4e02a2660f2fa6fc91632ff495f909769e630840b3e439349c24a3599d60c12618da74f9277ea76318d35a4120fe8429a9e82ab402bbf593e4862b08502f243d49ddae842ad750fc6d219779d252b67114724a37b4757e4498786050b5c9419232708e34e9ae9bc1c731444bc3df32773b51e6ef4cce1c72854553ce6d2e50b0a3f2284bae98e0a9bc08b4ab9d25f5a1f9e37e2c96df151153fd6db55fc35f73507744a89422b31e28826032622d05bb8565ed46962f8cb6e70b87ab9318876f7a977c69f107b795afe8c2da5a8ed935550ebf84418a1414064b2f9460d015da674a6ae4bf9a2f5d413671386f6f8f787e368f79cdbe5d4b4d66c77e03c5ff712a3c7284e4a606e14b43aadc3e1a580eeb6ccb023127a0a1067be20265bab1e60d9b3186b33c9460808d94d9a7d7603efb1226072da5d7f905d655c6b5d04f8d2cc5eda9585b647e4b1f931e0f2fc9ffa7974297c44f3f162101d9a924b1d7e4adcdfc175d5ebad5518685a5e7e773fc9c78b5716f3a55846d90ab9614291244b782b6ff6ce620745dafcc4a83dc2fa7074bac59c88757238891f3e93cd9a98b433ba4d490f81cd3aceda382998986013c0777dea051d47b56ed5291ac52473ed9db4daa596e4352182fe422d38f357e6866816e1372b64a7f5928d2232c97565bf2ec0273e17123b2975d7ce2000b77fb4bf383a988f5109c78766756af9a4047b05e99b80fd8092a7b3b9682f121a6a491f2de93fa98600f3934013bea28f41936cf8e2edde00acae907a5c06d9a4f6a602147871907e41cee347b1bd8d3f3a4902dcfcac0eeb7e79dfda0cc0982ee266af5cda329067b1755513373320f17f25a0d41b76b3bd08941067f923e387647b60ebffb969356fa04d02306a91d8cc71171dcf016ad6e67b7d1dc84a842cc2cd236c9ab528a04fa88b82c69a8196974b5cfc7212983b445201bc64be35abe0d8d73594a1f3cb54c1d3e694beb1bb871ca4c517d3c23abbcab292670eed97290b0ba9a6865d0c8976bfe5151243fd97090a22ff6f42c72532404c60828de8149ca2f82e188f2c511105cad4031835bef3fe497a65c972d930caad8946c5b2fb62506e4b934c6cf14b226cebf1a609c3e210be3e65b903848d2038e90152f7df2c8cb111832f1f645ea7d7875d647f189c554d0d1a676592a9e1693ea9b41523a3409eb7e281c2c2eaf1c0176cb8aad2a98ffda73ba1a51cec2318f4ddb40ea84cd6c3e69580c324c6b537c3a44244611793cc1ec9ff713d49eee77fa76e8089efd28af72c80fa344bd7e87acd4357f821a8b8f150fd0c5148d96c74c3397b100b74d8416603fa4c62ed9408823d7f87bf9a4c0b804f48e3bd1b32650bfd7b831273bbb8bd2c0813c58314d4f9323810547a0277088da3e7853a6723d70db47152cea7aa74e17b514471d319fa1b421ccfe9ec08b0e6cafb2c4a2f636c642cf63570e94e98ad7fe0af59e572adb9b34fb03cf6042fc86eefef8d4fa4de498d902bf8f1f66ac960f8171a436bb276b7b70eedb3f029956a49da3576f88815e334d8d58fe69d6b702c191057d4384eb991288cdb1fb562146a75a35af0298623f4f1d7783d50c1a198af2d37d7976cf5a21444b8b1c5952d72b441113d9d4938ea632c0b3dae48413f21919fa50de7a9ca8ccbce370618ff741425e4a912fb25bea77e83eb82b8af81a65b119f94b4b8a1b0df8f4ff5230b8e5ccae6b7ec09a1fbe8aa9a0574b5bfe931bf4c9df6e4caed9b3042bc2294128491e34c5f5925f50634c015b89fa9dd4b73070101a46ea4ffcd4e41b942b026ce5201d6924ea5fb1bf3047e8efb7b3b8bcf12deed1528ec489afb88bc11d368499341c1f36045e3bf5b59e37c623c52e5aed5a362e8dce0979b4ef8613931ee9339637ac5f99b8b5459071ccc8055e77b4fa5097a10bdd3d7332250f5af0f45a0f7c7999d9aea4a1ce196d86f6c22535f8ce28f4b96334a0504b015ddf653452eb9e81638298f4c222ec6563ce0e5fa8b1a8cc96fa21c61d53fb13926a414daea218ad0495a220a4d0a2b83b1b8c9dbe966d43c5161bdcecf4da525be8d27d49ba5bf50ee53a35c047774c625d0b848d244938d8bfa306ab98eb5c96304e5f309d7193ef30c776eb9bf26286f3d1dc85d5c795e19a2b11d16aeecb266b6acfa2525df7cc43b207eb074a690a7bd3dfd89bbe70958cfce2dbab53f0fffdd445ff8a60177eaeb90acfebc55b445e919e62ecda716ba269955373a5ed0ec0a0624d72016f97b6f9d4d326543f96d43b48333050c7c75e13cb85a3e460fccb34a5114c67f0876de3db409481c71e8a32ef0f5fadc3947574d3afa59d79b0837da1143eddc866d9424c476fef6a77fa7574c5d49fc53c9aee1465a0fe2b67fd24a2ed4c19184518486513aaace97d7911540f4fb785e089813b332d9e64a3913cc33508dc0c465d885b1bfa6c6e3767f2fc083c9dc97e75b4945714930258bbbfd2bfd1356d12bd4321acee59af277ab4625149a77be4bdab541fa848e5d2f883c92dc8240237015c76fc59531d8341e652da181377f1179f3c12e8f04f585cac9cb5953a19ef56171c91665504584b59d2d91b8f29e6eceb57e472fff12d7dafb9d78111a0770e01b9f8af84f177095e75197df21179ee9149d1b81a6fd3c1e6982d634db9ecb1bdc57ab5ebcd40b48eed52026a56d1d9eca864e05d1d982bc0b788336bccf9a8c3a0d96533c54fe448abfc019903e6f4975bb5fc4f758e0b196ea85c0c4c24d643935a0622caf37d5bac67e79ca0b940f585d855dfac447e6d7b638bb9516f8f3e33095c9b256b75b662cc0321c0b5a99228bb670bca4d9cac45e796cdf14c076a76b7438a06c0570b5884589ddc5744836085a801fc0978c8631479f6ac1196ee5024c25073f16f86326f8b0bf91852ee396bd6bbaef655bf201d360d225d2b4d6f839a25629c53e129b0fede12d9926cc2a58cb2eb34a69a8a605aaf6e6aae53d6e3d6d576f4ff4a258f9f26f33a921fe324e77aab5cd1c8f0d77765be653be67c411c1124dba791bf33ebd3e336d9a49970deb6ebcb14fa8e67c229e9058ae4bc942a4b917c29ba33a462b4d76f533e27248f524295f046962dfd6120bae0d97a720a3be659b9534c9f0923d39a3891d9373e671f8628126ce8cfe8241ead1c362a6a1cee36775d6ccb014f5dc6d462edd896d64ba8e926da9199cb98aa07f5d988aad173b4b311722a776c0a8c3a2bd027b57ef1f3f509f8a4ad60d2e4afa9970b22918f652adcd7a2cc0fd73592c2218dc32704052e22cb4b3b87425690ae0a33d844e316f941c76caaff7ba811cfa484269c7e1e5c3690faf65bf0c01cc409b10f3bea65f908fbc417c6942c1602637f3cccb86f88b877edb3a15e0487091c4c7804fded4324a318faef56d604780965416b7971884457546df5c3495df645ffc5d30f3714f7d399e6fc00c5e0e2c92f942b690f1be391b4c6032bd5711d26c6b970c94be4655004101eeb0f4c2aab329c7a0fa8305180afecb3009547fe1c8f230ba7c41505747f5316ba0e0b4581267777b509f73ee5a036ce48f69a854c530c6c162ff18512ec2a9db29d4153abc5d8105f8ece21c9de26c380d0dfdd85d65a70626f5f9161e0415e2a13ea3581ecdaded5fdd2a630536c1d6f6673c5cb7e18e88279cb90fede7d0c4cfbe8c959613f92828fb34f395e3aac4b83129876f80e2d5cd529a4baf998c2b335437d49a1b2fb45632e5c1d65bac3d82b1a663725cfa0ce17f5bb27f2f9acc9a0f2c074f2f8270b53ac7331d9161d4c8213640b938aa3f7dd52b205462270cf55a6109bd2b2b117b5d19f582e495556bf29c7c6a0050b10685", [[]]}, 0x11b0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000012c0)=0x2, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6fca6cf8e77c20a7a318d6c498e426a7e83c20", 0x13)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={r3, @local, @private=0xa010101}, 0xc)

10:16:16 executing program 3:
connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:16 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:16 executing program 3:
connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000140)={0x990000, 0x9, 0x1, <r3=>0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9a091b, 0x5}})
write$qrtrtun(r3, &(0x7f0000000180)="d6dcf5bd562ee27f97036f3d2333d6fb03a7ec4d82adc059ac326c462b21c21f0954910c9b7c47619b507935e19fc032e295fe48e56bc3a2571a73ff6b8810e6acef67e4bb63fd836bef97e322c1132b6ccd09ad55d8f5926447a78f5f9f85209cd71ff2da3a461198e5c4bdb0aa345e572fae8ab7a3ad48c8", 0x79)
splice(r0, &(0x7f0000000000)=0xa9, r0, &(0x7f0000000040)=0x1, 0x8cf4, 0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:16 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  655.030458][T23111] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:17 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:17 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:17 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:17 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  655.619543][T23138] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:17 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff00000000"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:17 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3a0}, r0, 0x8, 0xffffffffffffffff, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040))
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
sched_setattr(r0, &(0x7f0000002d40)={0x38, 0x0, 0x10000008, 0xfffffff8, 0x4, 0xa3a, 0x1, 0x8, 0x8505, 0xa}, 0x0)
syz_open_procfs(r2, &(0x7f0000002c00)='net/ip_tables_matches\x00')
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x600100, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x800, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$sock(r3, &(0x7f0000002b80)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001540)=[{&(0x7f0000000200)="8ac7211bc2b70d75298ab56feb5ec628eed6b8eac351", 0x16}, {&(0x7f0000000240)="28faf017b197a3347fbb9ad76bef85a7296adb9f9c8855bac985e482cc43ce6e7c2f75f81ad19da53cbfe6d1e6b0587b932b409c955b33cf68208537dc0b454fbc288a6644a51f3830665c3a35f18d81c8da6af0be67427f684a36012440e7ef1aa5d639b54e91734096328b3e69359284617e5f943ba2049844d7d63f3f4fbf94ed1a71df0c2321396457a8450e6b39a95da941b8d0ea36e7a4231e0a60a011a9f849046b3ca0d12908c19141057b02612bb85d22991a8237d8babfcf0b855f4fedb50faf7f7beefc61446ab3fd", 0xce}, {&(0x7f0000000340)="8a6ab4f5562018dd506e0ee8ee39321a8432f3eceee8b78a9cd92bf5725c8a2ca2a3ac6fc11e838e77e70be035bc9431dc166fd36014e95196545bd01cc1899e19124aaea67bebecfcd0bf63493a951a411d5fdc8247ae12608c941db34a9f95dbf109a4d8799423e127660fa5bc170f1fa417788a188afe4a9f1c3a4b48698292238d0d31f2a1e6f0bf086da238b8a38bf974455074defcb0acd2529d75c88edad7b9ceb49677de03388aa5b269a11b95482b4ffb205e6795c742c6d6227181a819863ee9", 0xc5}, {&(0x7f0000000440)="2ef6bbf0ed9ecbd82f7d4519d8c3c4712eb6bb03ce1d51bcdd57a0331ac75775d65089bd61c26ee2985cd16c1694aa8e40664757825056d5adc118c9dd33a9fe08e13254db621430bc9f1fc692ad1768d568eaebf42a971bf71ea59456da78b166eb9f3b3c1351d374e0479091bcc90f600ba928ad3d17530018e18b6460d5996fd0de1b7c555108f003f60e2cc007334c90d48c26b241cf7a50e2ae636d3f996b2d7cbdbbc857fe393d150ebb6341b63ea3de7484ce46cc7e0a02dea179ef42e80ef0cc501a716473aad525b065715c80c82bf8f34a62237e2a96fd9a0a3d63e0327816200cf2f804d3f28b6c59d336c5d41e3afe2dfdcc5c", 0xf9}, {&(0x7f0000000540)="82cb887eeccda44e0b25de990b0e5e2b5d21eadf55692cac7d6e67a543203cad5c582b0ea82fdbfceabd38f692170defc48d08eda8618ff2f3f347d061f8f10d0f1a2cef6617a586a642e444ef1ea025edfe6c0d55b12741bf140c71d9fe57f0b1c994bc8bf3724a8c06d49064fb8ae23428038072f72ca4b63f757c8cd103e0aa13f4a2c920dab4ad0c8d04080fc76007525c37ded984dbf4711adc72a4f84c2f459e57a25b79c2c558ccc5016d3dd1971af8dc729623ef1945f5faa1e6acd72c3ef1b99e4a841431180022e2eddd62f28aca859743df0c8ed9b88b77bd587ba19c516e2c3f2c74338964a340de061844491d9df0754f2b60bfa1cde90d78ca04017db45d2be4c4f7153c1c7073aa69a00dc9d31e0908ef9675a871bd991c8f1dfe07db9e5ed7cee53612f29fb8658c213a54dbba7b827971b34c13ce4be5c1863c6b0b263207415b940edc198c47ec2d6e82c2b6a8dd7ba918c48d5e755c89df66f89b0411a214df8bed3cee1f182fb3753bc27346f74167ddc2b1e7042fa5aa8b9ddad1fbb58d6625220dd95d3e197455a1350811775d0504e13ac521d8a593b0516519102e5f3e08a2d77b916b8bfa46ad73bf8c476eed5d73c4e4a70193ab0fcb5ec711d260026a1969dbe9763e93f64d52c447733251486b003ac47941c2c8233956755f5b61e0e1a98e6dcc853ca8d09eff01cb52267459dff4238c6a8683e388cb6d320af4b8bedb0bfe1c332d46b8bc583c9f68923de2bb2673524be28f4fb1e10ed5580a07da1b1b93beccf48f5b87a4c956ca184759911c35b500975e9e350d3391a28564ac50e6c0d6521b597230e0456d066f58606a0ef714cab7b6ec6f8f5af7e9a187b2cf9bbca1b9abc9454d0530bd1f834630315c2bcd7487de84e4f24e43e2ffa0d454c8f4f4f432b279453c60eda980adf68306ca6a4d33a144084cad971e9fe949d1586646c5a400bea6164051ee744b7a7cd5d2811c558e03386732d7d374c1edd7bf6f8a36bbaf8f3e56f3b5899f78e6a53adec92151879817729ffc203ede4c7410022480941fff0113da5153cd7cbc534d86bafbcadaff73f979c491aaf33a5b4c31f423857e60551fef5c4c50eab35fc1b8d649711fff5606dd50d0819360c5a904d544d5ad15e6f4c01b6432c29251d9740f606945fe88c6d03d8a547dea9a6f234ef949b4fc8eaa5d5ff2622631955e5f8bdb54990ed05cc509641bac74d1deb860b4d781890b78974a8d5f49f96f69b74bbeb8b2a5e4acdcffa3569639cfe9c1b7eeafdbb93e5f74c7b4954bb3a2a0aeb67a309ebe9f7743a1493d8f8a0f104db698bbb663fbb02a2940366377a746b5f0262c9c9bc2b7b85531796287699cee0135929151767f5f733fb13773d5dcee1535c1588960390c811cafc186bf0379f73e76f3bda028eafc012420191296e9a8b831e5841812413a8f5c705337e5b912b442774ebfff41e7b1ee1eb71f034dc4a03251dd2767f14f5fb66a538e4838f6693fbf71c39e790fa219ec949b892246980cf9e76c5c541c7d44146b21bfa5fa4b0839e4fd89922364fead5cdebdfb8ed57d2d3dc7fbdd6854ab20013d947a92b9210c55670cfc2d9ca2fe679b443003424327326a1a4ef054953964150228843f4e143949ad03a718eaaf2756059fc24f4d4d11c772f1174c19429c9a637701d2d3a2cf9fe4e54911a19efa980724186e4ea825f356a813cac8e8331263e76e9bf071eaa0f375d8d978a993e49469638913167544c4c24173df858c3ccad0e247e73b9ec5c027b502caa5448c8a6ec72bdfbbfb094dc0099ceb6df27178ddaf4db8f08c9a596330afdbd6ed290a67d5674345afb6f1d6155c73dcf6768e8d83804fc18f341b1d7beed79d0f8e6c125948f1d7d6e4629a9a4e816661a49daea3dab70cfafb47aea7e9f90068b9a87aa1c42607acde774d23ce573908a90fb21f1354de825cb65729b93e5e80c3f56ac303d820635c445ccdae2f02c3109f1a74d9f0590d272b35b22217288b3e891188ee854d9c001aeb8dfb96d549967953990c0449dcbb25d2e379734ad7faf9ef52556be2722b64ed4965bd1670d85167d8f0f0d8b49d8aa0357313c1589dcaaea6274d9555977df2182f6fb1797da54c581265cd54d4b88c77d7be92282ceb804b12e6a5da16096270f39254b555da410683e243b6ac3476013f00621538276903dbea54b34353af94a911623f89170c9c67f994bb2f156515c693e6b1d365a3c245d9d822c9409d392aaf5e5d13076450d03cae78ffce5f9bbf6f9a78f78e4666d5c03b240d3c813d04594d384d72ba2ee33c74c6ac1f5eff12ec0e580bf6d45251653105e94e06b7e02392edc8fbecd402c249e401d553ffe69bc39d4d33e6b381d2d7c56a7b47b3f63683494be3845d9027694b26923d4f8ca9f3b40792082917394111d7988d268f9975886c758ba87462c0497e289189eb6424b1b50855aa1c172243ceec7bf5cbac78d75bc54eeef53b87df039a240b03de96077e1c689ba5607695c7c5cfd990195b2c8ba4ec531eb5b544bffb537312918cedbc79f2b0552b07360c544841c928347478209504f34dd4f5a6b92c880c53a546d3f37a95b07d6ed980f156d8f54b20237ca348ebaa80779ee3f1f69f03cff4eae781ce90308b38b8c6bfd7fc862d610cf1d43e931fc54cd67e706d3119da477643b548227229ec2bb88334bb72eee285e7997a54a213f4652107c9f48e7d33205adb5434c5da992d479b70a2804cfc683bfbd6c16a8dcdd20c182331adf79f3df1c584488398d447c274b60ba6c5b29cc3b9b11c7df5bb9dc82fc24665ed19387dd7388f8095c51c8ddbf540b9ee273551cf7d2e9a76254a6e049e9e0df338b6616d4e3c7442d888f9ef2720a1d8282d81d2b5749fef3c31bb99a9494cdbf156267bf642be0027e1a8ad45b8302802643f2352e3a02edfa5c1ad8abb548b81d13e27c7bd5288a36c7299d25bf7becc22ec1f4c8dfa7ed243910d682e9687744d0efcef5bd14f5b8da74661e931588449c5288851727341e4ed3cc117fce84299335ad7197d7478902a2d0516427b1ad08d4f52b01b07e41b401d99fb4f59a0b5ea8a5cc02d7b36bda6be40f3a4ecdb4627bf2c2470745299fca7362f111bc5f4f68162ab81a6b2da0f8e56278bfa2fecafacf46885f85f81672173c8f8b51dbe92980c0381affba5eccee6a26af7dbe23369ab3b52ca79c6f2e1dbdbdc7c8b75683782ff00723b8fc5b6b795d5903d839ae5cbdf64de8dfe1a373eb3c9948c30c089fbccade10014ca48c038e2c1635dcbb1236aa47f4aa6093a37311c55d9b76d94cd6efac271ae913ca25568cd62dd978d15bdf9d968a70697a5d53a8ec54a3f54bbf2ed70139a0961e6f847f2b400f1fb500d1087941b89faba747bbd4640c3b8d8de7d7aaa4e39357d8a40315dbabac95fca6752691f4a57b51269e8c2eec408e5022e89e0650c97f58e476f7c1c5932760741a51919ae9c5e44c298d7c2c8f64f5cafa92d1859d4a3bd5d7227b7c834158171ce7d304b7cc06f01d27072a2f8ce6691712317049bdce6b7db3a04570dedae1775141cacb5c275209d1835bd889e7116ebf8c06163835b28d9e4c7703ff8ed8ccd4548a8e8e8658c74cd2f491e2e4e7739254f72d043e5787b3050e972a578c2687fc8448d8f2526fbfae0340440a4ff699cd882fe7bf01f448b2a87ebc368e41f0de0b230dbb049a083c34ae6ca89ffd16162962eb746ad63bc461df5c85be129a2cf33b2aa33d43848da7be73d0e0e38683dc8ceb3eb9c7d228564159b780c5d1f6bfbc4f0d216c2029ce18287b1530abedcb81cb2add0350baf0d1096df8100cc727375c58c16bbbc8b19488d48569c33c0601085909c47e29ceb5047c2d0f18d1a551aec9fa69f0c5b12a04e92f5e95ea75e509302eb1ba3fec2f4a8e96e758c64349e972b405891248fb4cd1b294d33badbeda86762fbe33ff5eaac0fe66885f46898929476eecddb49d2eb7a933fa854d7fe10745fbc617ddb3d86b347d6ba8d70e6993c9a9639c3e8f6762727bd0e6b972a2ff91d01de2e4ae03f926e792f8eb95dda586dabb9f3620aeac3da20afd3976ac5b04087241ea816c52f678dcf7c9ad5e281db3a937cd018c2753ce23e6d17f3ea8df53796148c9f52e28e58de72780000d04076348f1a3183953b7d0bb1a89e19589f789f9a2af73f808bbcb1c5745df2ed3c96804a03c9038350959bd6d4596e0d7ecbbbad876a569ecfebb8bcbb1a85004de287a554c32fc53d7b3fc74fd3a42cd00459c624716bb5e45f08a9fe1363fcebad0a6807a7f6d6734edb99fb292dde9bbd75ea5705bb0ec04367e25739316b003abeac3644475cb81381dec90b55ef069ea6960f5e545c48106ff3d1976e1146d02e0375a9a417246aeebf294dcd5017d59a91d1d6a58d9d3cd9bb2059a0509735379cb6e851557e673a91f13db9033151722a335af77791206957bb7fcf52240eb66d3cd6643d688ddd424dddbb5bfc0b8a7def769184debbab82faa7191189ef18cb18cd43524b2a306171f4f01f15cba1bb7bdd9a68b4485dbde1844e63f9233cea81f5813e51ec1e48f32ba4a051f8dd9d40cc24e4adf364ce887f8d4246c7a63795c57965d63829818b6f05217e7068ebbbef3c3b225ce73b8b40a6bbefd3a03b48ab22bec0a33bc1c5b1c13432f65c18799d8777d740c04e0fc1b5439957488f33e54d12abf304c7f3dcc9ceb2e2d6a9fc7e07174e452dd7f9b5abfc8f13f9b8365ef14946a7b8cd44649a592deacff0f71d93138db1ce225dc0780da8a8fa29469ff1cedad0f7b5a9c9c0034b7b752c8663f737be045ba22984d230f2ff2cbbfc1fd58bb639744056ccf32e0e858b91abc38aac14231a4e28e61955f136cf7374659db941ed2742ad2aa13613671d62ab5860b2cc7bb9eabe4b4c5dcacebf03c665a17588641bf527a7348fea1d41e4004624e8cc2069b81dd5ac7fdae475adb6024261c7eb607cc2730c8279dddb32d6e8a707beb4aaa1818b3f4698b300821d3e8578b92d0d90d9a59946338e6ecb32882bad7b7268b01fb89efdcab34160e17c21d80c721694a87dcf340f5505cff98a831dfe64b0bfe278dd17b13a882b6c2b4344938e0d7daa9ee27c00e9d91e29a114d6a94e51b7e1a76185073752d798eef40761694bca4b8a9e13ca1d93512f01aeb11242b34eefda35c03d0927ab71cdbfaf4b40e225ad7f74d8ce98953c1a507c1e9c252c46d8c4dd3aff3c89013b50dbae1702e2449bf536312b8cc7a04919f23af51ba9479c4d7a386c4b03d44afdaddf19060cab27784f7eaf3df9f35ebddc3295f2bbd774f6f9599da08b7ebb65848c76a963b696d831a98b646264234786211d736d5b23dc84957291a8f400193bf232ef161b9572aa5411396f7b5fb8a739c117ebef14280892697078efc0b3c77d9a99ba5cdbc358f0f6a750812d0661cecb71419f1435c015fbb58c9b9472f05a5527e53b2ee79a5c871926431ba96765a17ac998bd5159d14fa12422c94c60d579e5101768a3dc937c634fcc741f66cb4822b85a8b00ce386b12acc7377d1459a4160aa62bb9a9e8a314b2232979e50ef57817dbda587b03ebc850cb9a0b9ac2c654f371ab731d0b24ce2d801fcf63695fe62440041402dfd925b60e3f3ae8cd0bedd052115d50c6b4e1778a3742356ce375a93630f9a8427ddcf8f5123349936c0a3211a3682507df29323741451199af91f78b9cb02e22df5ad7d6cac100c80f", 0x1000}], 0x5, &(0x7f00000015c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}, {{&(0x7f0000001600)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001680)="d13c35e0002d309edd0c129648b7f3b0ab557836e49c939e0352d832884332d56c5507", 0x23}, {&(0x7f00000016c0)="29ba2ced031220b839f2d7e863843c7aae0fffc866c66e2d320f879b4482a0212093af0aa33d56978c5fbe6c57aaf5f9db47e2952fcf07a1a747bdc4314896f7733e5fb760d85a34dd8e70e2a651bb9a12be54d5ec1f08d15a222c3f1f4f6cbe789c03f6c279bd", 0x67}, {&(0x7f0000001740)="c5e67a6cafe14311170bd5180cf9244377a5c66e13d6c5d2abb070cba328cdfc6d76e50fedebfa0fbe3bc02d461d8ecfdb8de957f7f280acc69a56b5a5d276da131813468e52e5b999500bd681a22444682a6d871df4289b92d59281d2e159aea7fb20f0bcfbf6e3b88b516800fe7fe301643e51fa40e50e7a96024cb6607fb21cc49af3bd33c32259b4800990a254933b2910ddbb71133c01b9e8b06332ce9637d1784e0a91849c288710df97b62acb9acbe87dbf2eac9e251a5ed971c33f6b7e03fbfd29dae2387e9e1ecb46e900fdd8ae2c0b71729375023e71f327f7984f973ff137a965c3e47ffecb96", 0xec}, {&(0x7f0000001840)="921b0c77184115ef3aa39004d3b9645974496f5bc9b7d25ff3669bb313d38e241d11e8b0c6cc845b29212e7479f5a075", 0x30}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="4b98bcd05c71eefbeb54c466972f3f779344dce1ea5b7cf877d53d8fbf1dfb179a9fcb4dce5ec91e5c40b35707f9f00a7d832da505aecc5df987451ad4819e34b0716977ec22c5d9144776a96c837f7843b69113e85efac22e0e87e522d369ca2e39139982e27a9c7a9e280798d2eb516e25fd1e49af7d0dc57dbb6aa84600e9955bd9d7bbd4859cbe335cea727c49a1ad495ae2e355234d5b38dc5badfef593b8b9f54cfd1243f80533cb3a5ba3a956965dfc0ff0eada282d09d84d6f1895c1b8762f25742f1482890f8882f4f66000387bbd597904399bd7f6c1c9584b9c737970b57644fcd2abed", 0xe9}, {&(0x7f0000002980)="37b0fe420b3aaa3abf38315354606b0a1c4051ca7869469176845ed221c56bf37e005861a1719edb994d3bbbfdc0a744d25ce93d834128335ee3beaef5f3935287cc2f301c269047e7de7c7fa55cbf29cf917c827a9b1bedbebcc1281e74a0f3fdc308e8465dbe8a6280759b0ffaec00f5f055259c4647f94d599cdeed410b94272149bdab847657d93a5cddf9988b87d3e4e15874ad7587f6b1080ee25e14e841f11224e6f49f9ec9aa9f8e7b30267880c960", 0xb3}], 0x7, &(0x7f0000002ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x70b8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0xc7}}], 0xc0}}], 0x2, 0x20004090)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x20, 0x453, 0x2, 0x70bd26, 0x25dfdbfd, "6496c0a8055617a79673cf2ab8a5b537", ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000)

10:16:17 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:17 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:17 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:17 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:17 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, 0x0, 0x0)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:17 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xbb, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  655.985355][T23149] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
10:16:18 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, 0x0, 0x0)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:18 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:18 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:18 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, 0x0, 0x0)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

[  656.498422][T23172] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:18 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff00000000"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:18 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:18 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
pipe(0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4f5d, 0x101800)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00', r4})

10:16:18 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:18 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  656.751464][T23181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
10:16:18 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

[  656.866763][T23184] netlink: 'syz-executor.4': attribute type 25 has an invalid length.
[  656.884490][T23185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
10:16:18 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:18 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:18 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
modify_ldt$write2(0x11, &(0x7f0000000d40)={0x100, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000d00))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r2 = creat(&(0x7f0000000d80)='./file0\x00', 0x195)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, 0xe, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40040)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80b0000000500000000000000000000010000055402010003000000080000008e8b04000200080073797a300000000000000000000000000000000000000000000000000000000083454e10510752dc05e5ce449dc6bae8158e7c5f62658498c9983f98c0cf271bdffee993e08fdf8832bcdb2ae849b414f6b58e258e761966f2508e8ba187598d7d0e000800000000000000010800ff03030000000800000002000100010000000400000000001385000000008100000011ed000003000000040000000400fcff00000000010001000600020002000000310000000008040002000000020000000100a00d0000000008000000060000040300000003000000070009000000000001000000050006000100000073000000ee07090003000000040000000008ff0003000000060000000500400001000000050000008e00070003000000010000003f0000000200000004000000000047ff0000000007000000d10004000000000043de00000000010000000000640d00000600400000000000000000000800020003000000050000003f00000002000000010000000700ee0001000000228e0000030020000300000007000000670205000000000001000080ff07001003000000300e0000090000f0010000000400000003001f000100000000000000080008000300000003000000000105000100000055280000c314940003000000020000000100800000000000040000000900060000000000f9ffffff01017f000300000000020000fb015f03000000008d0c0000ff00080002000000000100000400030002000000020000000600060002000000ff0000002e7020000200000003000000540201000200000088000000010400000100180073797a3100000000000000000000000000000000000000000000000000000000d9e49512ef02a7228ef6b46f43596d8df7fecb221feb1a02cf3776a00f6197374b699176d3da89edd630637dc56a9eb18286e0072739398f0d703bbdbc36983b07000800010000003f000000080007000300000000000000050007000300000001000000070001000200000009000000ff01020002000000040000001f00090003000000010001007e0005000300000008000000a800ff0f02000000380600005d00ff000100000070000000ff00090001000000a3f800000400d4000200000000020000010409000000000008000000000001000000000004000000ff01060001000000050000000100050002000000000001000700000002000000050000000300040001000000e55500000300090000000000010000001f009a00010000000200000030000000030000000000000001800900010000007c0700000300070001000000000000000101ff7f0000000005000000000038ac0000000009000000ff03560403000000050000000200010002000000fffffeff0800070001000000ff07000000008000020000000100010000001f0000000000040000000000050003000000018000000800ff00010000000000008000100180ff0000003209000006000500000000007b030000ff07000103000000ff0000000700e9000200000001000000b1fd0400010000008c0600000800000003000000800000000200050002000000060000005e3f080000000000010000000200370003000000000400005402010003000000090000001f04010006000c0073797a3100000000000000000000000000000000000000000000000000000000c17fe28bb01f96c83282db2a8ccc0ee1c645817d255c7d831440d31fe8752b6295cb929452f67bbb0fea543afe08dc421ad4df702ad629a30ddfcbc67ba0ad4bffff001000000000cb0000000000001000000000050000000300010401000000030000000100020001000000070000000800050000000000000000007f00010001000000ffffffff020081ff00000000000000000700050003000000020000000800800203000000faffffffff074c0e03000000ff03000004006d4a01000000080000000008898e01000000ffffff7f80000800000000000100000007002b0f03000000090000009e06ff0000000000010001000500030000000000010001000010010000000000018000000600080002000000ff7f0000070000000000000043040000ff7fe70002000000000000000400060000000000050000000800090001000000080000000600ffff00000000d9805a1d4e000600030000000400000000a0fbff000000003f0000000300010000000000ffffffff00083200030000000100000003000400020000000700000004003f00000000000200000004000400030000000800000000041706020000004790ffff030045f201000000040000000600080001000000fbffffff4000010002000000000000000600d00901000000010000002814018000000000ffffff7f0500004002000000090000000000000803000000090000007f00040002000000c30600000000060001000000090000005402010001000000e800000009006a960180270073797a3000000000000000000000000000000000000000000000000000000000acd448ade2691ecf3480b6d809bc4b2961a5ac504af6ec937ad2c769cdb702e8f50cce6af9f961b343dc14c5b64fddf12ad68ee4ad0f5f018cc924342bff193a02000100000000000200000008007c70000000002c0d000001008000010000000000008005000300000000001f0000000500a00001000000090000000400020001000000820c0000810000000300000003000000ffff1f000100000002000000ffff00800200000002c8af3d01004c250200000000000000ff0fa6000300000000f0ffffff7f555f0000000000000000432dff010100000000020000000004000000000064000000f7ff0001010000000600000003007c5f030000007a270000020008000100000000000100030006000100000000000000070000000100000000010000ff07020002000000800000000300ffff010000000000008003007f000300000005000000ff07000000000000030000000000d00f02000000810000000100000001000000010000000700050003000000010000000200ff010300000001000000fcffdb090300000000000100e600010001000000001000000700ac0002000000ff7f0000080001f103000000666a0000ff07ff070300000096fbffffff0ffcff01000000000800000800030001000000030000000800010101000000090000000900ff7f03000000060000007d5bc500000000000000008004007f0003000000020000000400030000000000440800000800c4070300000020000000540201000100000004000000200202000700000073797a300000000000000000000000000000000000000000000000000000000002de6f1418278babcdf12b72176b42c4bad9a3e8be7d7c757b84bc65e03aa98c90404e4241f6fd7830dcdaa8bea2cd5b36d593388475c893e7b90afc3b773b000000dcf701000000000001000500cf0402000000fcffffffff00c502000000005c0f00000800080001000000ff0100000900df790300000004000000090006000300000009000000ff0f93060000000002000000ff01070003000000040000001f00090000000000008000000400200003000000010000000200030002000000008000000500200002000000000000800400000102000000000100000700060000000000010000000700f00c01000000b53a0000472a000002000000070000000104090000000000e1ffffff0200ae4f01000000f4200000080002000200000000000000f9ff010003000000080000004000080003000000ff030000000003000100000092040000040004d401000000000000000300090000000000070000007308018002000000ff7f000009001def00000000b89100000300df080200000002000000090006000200000008000000e40008000200000003000000020002000100000099e3f35e3f0000000100000001000000080020000200000000000e54090000000000000002000000feff000002000000000000000180800002000000000001006e63ff010000000008000000810008000000000000000100060000100000000007000000ff013f0003000000d8a3ffff09007b000100000001000000"], 0xbb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001)

10:16:18 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:19 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:19 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x7, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:19 executing program 4:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:19 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:19 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, 0x0, 0x0)

10:16:19 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r3 = dup3(r2, 0xffffffffffffffff, 0x80000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, 0x0)
setregid(0x0, r6)
write$FUSE_ENTRY(r3, &(0x7f0000000540)={0x90, 0xffffffffffffffda, 0x4, {0x1, 0x3, 0xffffffbffffffffd, 0x140000001, 0x80000001, 0x9, {0x1, 0xb4, 0x1, 0x59658fc9, 0x3797, 0x4, 0x1, 0x400, 0xfffffff9, 0x3fd, 0x9, 0x0, r6, 0x6, 0x101}}}, 0x90)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000600))
r7 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYRES64, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESOCT], 0x18)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000740)=[0x4])
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x140f, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)

10:16:19 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, 0x0, 0x0)

10:16:19 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xb, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:19 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, 0x0, 0x0)

10:16:19 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x24, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:19 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040), 0xc)

10:16:20 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x38, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:20 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:20 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040), 0xc)

[  658.353895][T23252] validate_nla: 1 callbacks suppressed
[  658.353906][T23252] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:20 executing program 4:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:20 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:20 executing program 2:
perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x7d)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r3, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r4, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r5, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000200)='/proc/timer_list\x00', &(0x7f0000000280)='./file0\x00', r3)
ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000040)={0x7ca, 0x7fffffff, 0x89f, 0x200, 0x3, "996818490551488e878b83ed0e40397d65bbd9", 0x8, 0x1})
ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000100)=""/224)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0xa0000, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000300), 0x8)

10:16:20 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040), 0xc)

10:16:20 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote={0xac, 0x38}}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:20 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
pipe(0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4f5d, 0x101800)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00', r4})

10:16:20 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
socket$vsock_stream(0x28, 0x1, 0x0)

10:16:20 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote={0xac, 0x14, 0x38}}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  658.911883][T23274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
10:16:20 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:21 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:21 executing program 3:
perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xbd2394931248e5ce}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
pipe(0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VT_RELDISP(r1, 0x5605)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)=r1)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:21 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x7, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xed695b7ec1e39695}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0002020000000008224a1b12684e6f162d21da7d69f440d9f316b5fda07ce3d097128646b72d48a19b79fa186d472d8a76a37c4e7581cff0c1ef8461e91643fd7d55d1b4bad984fbceb29fcaa40ec2c77282f23bac3b95446ce4837abb68c792"], 0x18)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200402}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000851}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x77, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}}, 0x9c)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1f, 0x7, 0xd11c3dcc109ccfa1, 0x3ff, 0x0, 0x2, 0x4, 0x2, r5}, 0x20)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

[  659.262741][T23289] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:21 executing program 4:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:21 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:21 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:21 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
epoll_pwait(r8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x37, &(0x7f00000001c0)={[0x775]}, 0x8)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r6], 0x20}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', r6})
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private1]}, 0x18)
r9 = accept4$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @rose, @netrom, @rose, @netrom, @bcast, @rose, @default]}, &(0x7f0000000100)=0x48, 0xc0800)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0xc080661a, &(0x7f0000000140)={{0x2, 0x0, @identifier="e3149eaf30a66d614623d87bec4b5bbd"}})
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:21 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x6, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:21 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000180)={0x2, 0x0, 0x7fffffff})
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:21 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
setuid(r2)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020200002200001f02000000003fa784a300000f4919fd"], 0x18)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200), 0x2)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000180)={0x2, 0x0, 0x7fffffff})
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:21 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3, 0x2, 0x4, 0xff, 0x0, 0x100000001, 0x400, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x2, 0x7ff, 0x7ff, 0x3, 0x3, 0x3f, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:21 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:21 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:21 executing program 3 (fault-call:2 fault-nth:0):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:22 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  660.182958][T23327] FAULT_INJECTION: forcing a failure.
[  660.182958][T23327] name failslab, interval 1, probability 0, space 0, times 0
[  660.201967][T23325] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
[  660.231224][T23327] CPU: 0 PID: 23327 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0
[  660.239924][T23327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  660.249983][T23327] Call Trace:
[  660.253293][T23327]  dump_stack+0x18f/0x20d
[  660.257645][T23327]  should_fail.cold+0x5/0x14
[  660.262251][T23327]  should_failslab+0x5/0xf
[  660.266679][T23327]  kmem_cache_alloc_node+0x257/0x3c0
[  660.272036][T23327]  __alloc_skb+0x71/0x550
[  660.276422][T23327]  qrtr_alloc_ctrl_packet+0x22/0xf0
[  660.281630][T23327]  qrtr_port_remove+0xbc/0x3d0
[  660.286423][T23327]  ? __mutex_unlock_slowpath+0xe2/0x610
[  660.291976][T23327]  ? qrtr_bcast_enqueue+0x140/0x140
[  660.297190][T23327]  ? idr_alloc+0xe2/0x130
[  660.301561][T23327]  ? wait_for_completion+0x260/0x260
[  660.306855][T23327]  ? mark_lock+0xbc/0x1710
[  660.311279][T23327]  ? lock_downgrade+0x820/0x820
[  660.316145][T23327]  __qrtr_bind.isra.0+0x4f8/0x5c0
[  660.321183][T23327]  ? qrtr_release+0x2a0/0x2a0
[  660.325874][T23327]  ? __local_bh_enable_ip+0x159/0x250
[  660.331260][T23327]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  660.337257][T23327]  ? lock_sock_nested+0x94/0x110
[  660.342267][T23327]  ? trace_hardirqs_on+0x5f/0x220
[  660.347312][T23327]  qrtr_bind+0x1c1/0x250
[  660.351567][T23327]  ? security_socket_bind+0x83/0xb0
[  660.356870][T23327]  __sys_bind+0x1e9/0x250
[  660.361218][T23327]  ? __ia32_sys_socketpair+0xf0/0xf0
[  660.366522][T23327]  ? __sb_end_write+0xf8/0x1d0
[  660.371301][T23327]  ? lock_is_held_type+0xb0/0xe0
[  660.376302][T23327]  ? rcu_read_lock_sched_held+0x3a/0xb0
[  660.381862][T23327]  ? syscall_trace_enter+0x313/0x340
[  660.387157][T23327]  ? do_syscall_64+0x1c/0xe0
[  660.391761][T23327]  __x64_sys_bind+0x6f/0xb0
[  660.396273][T23327]  do_syscall_64+0x60/0xe0
[  660.400697][T23327]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  660.406598][T23327] RIP: 0033:0x45cb29
[  660.410488][T23327] Code: Bad RIP value.
[  660.414553][T23327] RSP: 002b:00007f270ff6cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  660.422998][T23327] RAX: ffffffffffffffda RBX: 00000000004da6e0 RCX: 000000000045cb29
[  660.430977][T23327] RDX: 000000000000000c RSI: 0000000020000040 RDI: 0000000000000003
[  660.438959][T23327] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  660.446934][T23327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  660.454911][T23327] R13: 0000000000000041 R14: 00000000004c310e R15: 00007f270ff6d6d4
10:16:22 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:22 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:22 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x12, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:22 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:22 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x2, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:22 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:22 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

[  661.082250][T23347] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:23 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7ff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000180)={0x0, 0x2, 0x80000000})
ioctl$FIOCLEX(r0, 0x5451)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x880, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x1})

10:16:23 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:23 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2, 0x1}, 0xc)

10:16:23 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0xa, 0x1}, 0xc)

10:16:23 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x6, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:23 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:23 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x2}, 0xc)

10:16:23 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x7, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:23 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = semget$private(0x0, 0x207, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$SETALL(r0, 0x0, 0x13, &(0x7f0000000040)=[0x7, 0x800, 0x3, 0x5, 0xa])

10:16:23 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x300}, 0xc)

10:16:23 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:23 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x8, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:23 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)

10:16:23 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x8, 0x435e1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x36b, 0x4000001000, 0x0, 0x0, 0x1, 0x6}, 0x0, 0x8e, 0xffffffffffffffff, 0xa)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x0])
semctl$IPC_RMID(r2, 0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x4})
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000640)=[0x100, 0xfff, 0xc5, 0x8, 0x6, 0x7ff, 0x8, 0xfff9, 0x4])
ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000600)={0x0, &(0x7f00000005c0)=[&(0x7f0000000040)="c767b95eb5df1bfc263f6fb7062cacd2651d0cef23614f", &(0x7f0000000080)="ad4b12a5d9a13634a56bf10a3a2756d858e9a59ac8187de318ede7501a0530609d77dc9ba8d946e1a3a181c6cbe1047287805cdf21cbaf5e3ed74af0", &(0x7f0000000180)="2a7e8c1323649741de666c63b19cc1013fd89097b6209b8c476d607e68eb0ef81e7c932f8cb3ec43e54efb9d0a43d0d169bc3218377b06030750d3ce1cc42fc42dd1771223462db6abcc5d20cc32be2b585c5610880ceb054f12cbcb351a411fa47d32f3503635687301815b6c4b46216902f721b697ce19db818ca310da8b9211b526e831fccc6405439965a6d2499e210a232108c71c7d047ad958bcac960a85944afe5b79fa33a12df130d5275697", &(0x7f0000000240)="d15a4ca6075e56b8a24e6c8b0e988576e405cb28bc617715db5fefa0fc7639e0a6182806342f2be976826ddd05de78a2b9e66404467e4f8e2a2bcc6ca5a5646822fb1f66a35bc6c9e76f34eead3e36a76602695de9ced2cffd1322d27f4abdd34b580ffc3473a2d974797789a6fd8e6059cdce8d3371931704652408dc27cf12b95fbcb2", &(0x7f0000000300)="529df63116dba3097e10fb5f4d1e56a11f2afaf36d9c1d362ef2ad9fabdc91673d30a8dd4dd8467ea3c1e2d20faab88447b0b6fa4af47b5a5bd819d7903103ea32495dca73b5a9dbf5ff4bae926061886012a640877f88bb021823580b49826858183fd10982499aeb863411cdbace0fef896bf0dd4204ad9a28c6e028874e24675ba196caf60aef69ce37f025d2e618f37dcd80bb2b7fa0150458822e779d62295e81db38b7f693f44fd7788a6b9241ce3cfe57660bcf13349dc79879012fbf87e5f688f57c5f4780f4e312e6ce5cba7ca9036c5a2d1df53cd412d4ce7af5bdf6304d73080e2c96d07924fa", &(0x7f0000000400)="de93e4aea1ce62ffe734fa21e54c714b5f7b671e6b5568799eabad613903931f946e1868d735896224655d32c70eab5d2eeb0f8845a4981baa4a525744e18a43fdcaeecd6ade8cb0d61559e17d5f56171902b09bc4f368700e8ae78c051a767fff883d8d2e9bdd72dbf32c7a52b199b034567cd6d604b45000ce255e510fb615df88254bfdfc62df9faa73921f161dcc9ada25a3ad1082bf37a0ea5ffb489c88cf80d3a7e7b833f9011020650609015473bb03575913cde1a589460125e734bb36c7d031cb7a5ac119b5fd16f4f68fe66b9a8ae99562eca019", &(0x7f00000000c0)="c1cc1a2e20ef5c0d4d1f7b1be319db418a1a4525145d", &(0x7f0000000500)="7bf3b293d942a03b9130f20a98551fed707e480d3ce8a12b2e755cc35515518ba7acdba1a01a5f252ccac1da89a6348b10facce2c1a6cdc8dc5f5ae97cde4d568573c00a8b67c78fb1dc7e2c2cfe315ac4ef55eff5a2615379542c1d7244665710dc1a1030e3286fb1d0ea2f1d68d4a4a01b3783c7e9a43e810e63d29c7e6ea4093fe6f0ecef8bc770073bcf5e51"]})

10:16:23 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0xb, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:23 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3f00}, 0xc)

10:16:23 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x4, 0x42140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100}, 0x0, 0x9, 0xffffffffffffffff, 0x1)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x2)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r2, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$eventfd(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0)
ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x0)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x64)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
read$eventfd(r7, 0x0, 0x0)
ioctl$HIDIOCGFLAG(r5, 0x8004480e, &(0x7f0000000040))

[  662.026099][T23393] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:24 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:24 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)

10:16:24 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x24, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:24 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_tid_address(&(0x7f0000000100))
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182)
r2 = memfd_create(&(0x7f0000000380)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0)
ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000040)={0x3f})
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x24000002)
fcntl$getflags(r0, 0x401)
pipe(0x0)
semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000))

10:16:24 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x38, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  662.578233][T23416] QAT: Invalid ioctl
[  662.610959][T23418] QAT: Invalid ioctl
10:16:24 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:24 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x34000}, 0xc)

10:16:24 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0xff, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:24 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc)

10:16:24 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x2, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

[  662.991578][T23429] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:25 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x6, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:25 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x400000}, 0xc)

10:16:25 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:25 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x8, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:25 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x400300}, 0xc)

10:16:25 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x1000000}, 0xc)

10:16:25 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:25 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000eeefc15c0000000000000000000000000000002a220000000002000016030000004002000000040000edffffff0000000008"], 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000f9ffffff000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:16:25 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3f000000}, 0xc)

10:16:25 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x2, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:25 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x3, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:25 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x40000000}, 0xc)

[  663.927813][T23463] netlink: 'syz-executor.0': attribute type 25 has an invalid length.
10:16:25 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x6, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0)

10:16:25 executing program 3:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xffff0300}, 0xc)

[  664.180199][T23475] ------------[ cut here ]------------
[  664.202453][T23475] WARNING: CPU: 1 PID: 23475 at lib/idr.c:84 idr_alloc+0x11c/0x130
[  664.230186][T23475] Kernel panic - not syncing: panic_on_warn set ...
[  664.236823][T23475] CPU: 1 PID: 23475 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0
[  664.245501][T23475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  664.255558][T23475] Call Trace:
[  664.258863][T23475]  dump_stack+0x18f/0x20d
[  664.263212][T23475]  panic+0x2e3/0x75c
[  664.267119][T23475]  ? __warn_printk+0xf3/0xf3
[  664.271771][T23475]  ? printk+0xba/0xed
[  664.275764][T23475]  ? log_store.cold+0x16/0x16
[  664.280452][T23475]  ? __warn.cold+0x5/0x45
[  664.284792][T23475]  ? idr_alloc+0x11c/0x130
[  664.289216][T23475]  __warn.cold+0x20/0x45
[  664.293480][T23475]  ? idr_alloc+0x11c/0x130
[  664.297908][T23475]  report_bug+0x1bd/0x210
[  664.302254][T23475]  handle_bug+0x38/0x90
[  664.306426][T23475]  exc_invalid_op+0x13/0x40
[  664.310938][T23475]  asm_exc_invalid_op+0x12/0x20
[  664.315840][T23475] RIP: 0010:idr_alloc+0x11c/0x130
[  664.320901][T23475] Code: 00 00 00 48 8b 44 24 58 65 48 2b 04 25 28 00 00 00 75 21 48 83 c4 60 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 c4 3a c6 fd <0f> 0b 41 bc ea ff ff ff eb b7 e8 55 1f 37 04 0f 1f 44 00 00 41 57
[  664.340514][T23475] RSP: 0018:ffffc90001dd7c80 EFLAGS: 00010206
[  664.346592][T23475] RAX: 00000000000000a0 RBX: 00000000ffff0301 RCX: ffffc9000fde4000
[  664.354576][T23475] RDX: 0000000000040000 RSI: ffffffff83ad7c9c RDI: 0000000000000005
[  664.362558][T23475] RBP: 1ffff920003baf90 R08: 0000000000000a20 R09: ffff8880aa208ab3
[  664.370542][T23475] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffff0300
[  664.378523][T23475] R13: ffffffff8aa5df40 R14: ffff888034517240 R15: 0000000000000a20
[  664.386528][T23475]  ? idr_alloc+0x11c/0x130
[  664.390971][T23475]  ? idr_alloc_u32+0x2d0/0x2d0
[  664.395747][T23475]  ? security_capable+0x8f/0xc0
[  664.400614][T23475]  __qrtr_bind.isra.0+0x12e/0x5c0
[  664.405651][T23475]  ? qrtr_release+0x2a0/0x2a0
[  664.410351][T23475]  ? __local_bh_enable_ip+0x159/0x250
[  664.415736][T23475]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  664.421726][T23475]  ? lock_sock_nested+0x94/0x110
[  664.426670][T23475]  ? trace_hardirqs_on+0x5f/0x220
[  664.431707][T23475]  qrtr_bind+0x1c1/0x250
[  664.435955][T23475]  ? security_socket_bind+0x83/0xb0
[  664.441165][T23475]  __sys_bind+0x1e9/0x250
[  664.445505][T23475]  ? __ia32_sys_socketpair+0xf0/0xf0
[  664.450806][T23475]  ? lock_is_held_type+0xb0/0xe0
[  664.455755][T23475]  ? rcu_read_lock_sched_held+0x3a/0xb0
[  664.461306][T23475]  ? syscall_trace_enter+0x313/0x340
[  664.466604][T23475]  ? do_syscall_64+0x1c/0xe0
[  664.471211][T23475]  __x64_sys_bind+0x6f/0xb0
[  664.475727][T23475]  do_syscall_64+0x60/0xe0
[  664.480155][T23475]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  664.486208][T23475] RIP: 0033:0x45cb29
[  664.490097][T23475] Code: Bad RIP value.
[  664.494173][T23475] RSP: 002b:00007f270ff6cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  664.502581][T23475] RAX: ffffffffffffffda RBX: 00000000004da6e0 RCX: 000000000045cb29
[  664.510552][T23475] RDX: 000000000000000c RSI: 0000000020000040 RDI: 0000000000000003
[  664.518532][T23475] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  664.526515][T23475] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  664.534487][T23475] R13: 0000000000000041 R14: 00000000004c310e R15: 00007f270ff6d6d4
[  664.544054][T23475] Kernel Offset: disabled
[  664.548532][T23475] Rebooting in 86400 seconds..