e7f3069e76474729b54a1f7ecddd307f43a258039d1703e363e8e8e1d39c84c733fb7c96a0e5e4d7679195f3d73adaa5dbcc0a4c5a7e60470816f398d73bccf698c90cbcafd3aa0a53c0b3e3f912059ce3065e39f57fcc3306b477f18905066eeee99398acbb4f800f408a5086964e028deb55cc87290eaf608c07855d835021c5bfffedf7f5e3f3559d538083ef55e366128050018f035ecb5ad0a68b526e5b0ee6a0c402895180b5d6b1b3b2a4f6c28d3f99cb924e4df6a4b97dd05551670ab9fb96fcf565b8dac0d885d8b44293eb9718d2978f2d1", @ANYBLOB="2c66736e616d653d2b7b256b3a282b252c2c00614a7f72ac577e1309d2afdafa68debf87b13032d38817a259cdfe82aad5a3d7e8f3e1a635103a836e20d25e55d221d828a39b0ede3e1d2d10a8e8ae85da223415a50750fd298acbd0b52d17e806c0d582775551975b530ba5e084b81531a96518074cdf39b18e2f79ff27da6a4650e7aca74f05dc0003f01b57d9796c52f1f48997a031b0bd3ae26355ee3cdbc99445b40119a0"], 0x0) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x200000, 0x5, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[], 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x2) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00') (async) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x111400, 0x9a) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) ftruncate(r1, 0x800) (async) signalfd(r1, &(0x7f0000000280)={[0x100]}, 0x8) (async) creat(&(0x7f0000000180)='./file2\x00', 0x20) (async) lseek(r2, 0x200, 0x0) (async) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) (async) sendfile(r2, r4, 0x0, 0x10000) (async) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) (async) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) (async) setuid(0x0) (async) syz_mount_image$gfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x9, 0x2, &(0x7f0000000400)=[{&(0x7f0000000340)="161cf0b0d7674b2a4db84b5a64fc81bbe8325f3cbae2b6fb6478712b9404e8a45a41a56a72f082727864f40775ba89daa80a6965fb679e8b263d31ef6a0a1d026f2456a634737914458141364581e3d421cb4c1a3ab8fb5888e638c9ddfd326cda1dd4d07005067337346648b59c0e716578fbb3738158cc6db94b88e2917c87280ff7da669bda6c9093ecf67cd86975bc46791bb01e0ef76356e99fa294bf404ba9ea442270fb6954830b76aeefaecd8c44e8fd94a98e23c52dd0eda3", 0xbd, 0xffffffffffffffff}, {&(0x7f0000000480)="d68953a32f57178cf9adec9c1953a9c19c8121ca9bb5a641a2ae93a1577fb8ab93eed2391f8e8c058ed6b6df302893222b96c728b1d834ce60304636ff9c57671253dc0a69b3aebbf85fc129d8aefe87881328d3420a70b193b1345547e11e1cff2dd90ad5490c6dffab186dc62c3a07dc0d7f528fa32707dccf32a9726a81a1206cb9e34923f7309e719f8ac1", 0x8d, 0x1}], 0x1800cc0, &(0x7f00000006c0)=ANY=[@ANYBLOB='meta,meta,subj_type=ext4\x00,euid=', @ANYBLOB="75b1dfcfac3113f8347238e1b92f1980a7c00e7f3069e76474729b54a1f7ecddd307f43a258039d1703e363e8e8e1d39c84c733fb7c96a0e5e4d7679195f3d73adaa5dbcc0a4c5a7e60470816f398d73bccf698c90cbcafd3aa0a53c0b3e3f912059ce3065e39f57fcc3306b477f18905066eeee99398acbb4f800f408a5086964e028deb55cc87290eaf608c07855d835021c5bfffedf7f5e3f3559d538083ef55e366128050018f035ecb5ad0a68b526e5b0ee6a0c402895180b5d6b1b3b2a4f6c28d3f99cb924e4df6a4b97dd05551670ab9fb96fcf565b8dac0d885d8b44293eb9718d2978f2d1", @ANYBLOB="2c66736e616d653d2b7b256b3a282b252c2c00614a7f72ac577e1309d2afdafa68debf87b13032d38817a259cdfe82aad5a3d7e8f3e1a635103a836e20d25e55d221d828a39b0ede3e1d2d10a8e8ae85da223415a50750fd298acbd0b52d17e806c0d582775551975b530ba5e084b81531a96518074cdf39b18e2f79ff27da6a4650e7aca74f05dc0003f01b57d9796c52f1f48997a031b0bd3ae26355ee3cdbc99445b40119a0"], 0x0) (async) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000200)) (async) [ 352.545692][ T4178] loop2: detected capacity change from 0 to 4096 [ 352.560690][ T3701] usb 4-1: USB disconnect, device number 2 [ 352.584403][ T4178] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:45:27 executing program 5: syz_io_uring_setup(0x7e26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xda}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7e26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xda}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async) [ 352.647785][ T4181] loop4: detected capacity change from 0 to 4096 [ 352.690921][ T4182] loop2: detected capacity change from 0 to 16383 [ 352.732413][ T4181] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 352.755656][ T4182] ======================================================= [ 352.755656][ T4182] WARNING: The mand mount option has been deprecated and [ 352.755656][ T4182] and is ignored by this kernel. Remove the mand [ 352.755656][ T4182] option from the mount to silence this warning. [ 352.755656][ T4182] ======================================================= [ 352.792647][ T3710] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 352.830131][ T4182] gfs2: Unknown parameter 'subj_type' [ 352.887042][ T3662] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 353.008800][ T4185] loop4: detected capacity change from 0 to 16383 [ 353.024645][ T4185] gfs2: Unknown parameter 'subj_type' 00:45:27 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x80000000, 0x9, 0x9, 0xffffffff, 0x3ff, 0x1000, 0x6}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/66, 0x42}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f00000004c0)=""/23, 0x17}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000000780)=""/53, 0x35}, {&(0x7f00000007c0)=""/119, 0x77}, {&(0x7f0000000840)=""/161, 0xa1}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/178, 0xb2}], 0xa, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000c40)=""/225, 0xe1}, {&(0x7f0000000d40)=""/250, 0xfa}, {&(0x7f0000000e40)=""/175, 0xaf}, {&(0x7f0000000f00)=""/111, 0x6f}, {&(0x7f0000000f80)=""/134, 0x86}, {&(0x7f0000001040)=""/204, 0xcc}, {&(0x7f0000001140)=""/59, 0x3b}, {&(0x7f0000001180)=""/216, 0xd8}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)=""/85, 0x55}], 0x1, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001680)=""/150, 0x96}, {&(0x7f0000001740)=""/152, 0x98}, {&(0x7f0000001800)=""/189, 0xbd}, {&(0x7f00000018c0)=""/177, 0xb1}], 0x4, &(0x7f00000019c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x4, 0x10000, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300), 0x0, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011600), 0x0, 0x4400}, {&(0x7f0000012b00), 0x0, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c000000100008000000", 0x26, 0x8d00}], 0x0, &(0x7f0000013800)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010000108000000000054000000000000", @ANYRES32=0x0, @ANYBLOB="0005f69fd5faf00008001b"], 0x28}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x810, 0xffffffffffffffff, 0xa0eeb000) lseek(0xffffffffffffffff, 0x200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12000) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 00:45:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x200000, 0x5, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[], 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x2) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00') openat(r1, &(0x7f00000000c0)='./file1\x00', 0x111400, 0x9a) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) signalfd(r1, &(0x7f0000000280)={[0x100]}, 0x8) (async) r3 = creat(&(0x7f0000000180)='./file2\x00', 0x20) (async) lseek(r2, 0x200, 0x0) (async) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r2, r4, 0x0, 0x10000) (async) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) (async) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) (async) setuid(0x0) (async) syz_mount_image$gfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x9, 0x2, &(0x7f0000000400)=[{&(0x7f0000000340)="161cf0b0d7674b2a4db84b5a64fc81bbe8325f3cbae2b6fb6478712b9404e8a45a41a56a72f082727864f40775ba89daa80a6965fb679e8b263d31ef6a0a1d026f2456a634737914458141364581e3d421cb4c1a3ab8fb5888e638c9ddfd326cda1dd4d07005067337346648b59c0e716578fbb3738158cc6db94b88e2917c87280ff7da669bda6c9093ecf67cd86975bc46791bb01e0ef76356e99fa294bf404ba9ea442270fb6954830b76aeefaecd8c44e8fd94a98e23c52dd0eda3", 0xbd, 0xffffffffffffffff}, {&(0x7f0000000480)="d68953a32f57178cf9adec9c1953a9c19c8121ca9bb5a641a2ae93a1577fb8ab93eed2391f8e8c058ed6b6df302893222b96c728b1d834ce60304636ff9c57671253dc0a69b3aebbf85fc129d8aefe87881328d3420a70b193b1345547e11e1cff2dd90ad5490c6dffab186dc62c3a07dc0d7f528fa32707dccf32a9726a81a1206cb9e34923f7309e719f8ac1", 0x8d, 0x1}], 0x1800cc0, &(0x7f00000006c0)=ANY=[@ANYBLOB='meta,meta,subj_type=ext4\x00,euid=', @ANYBLOB="75b1dfcfac3113f8347238e1b92f1980a7c00e7f3069e76474729b54a1f7ecddd307f43a258039d1703e363e8e8e1d39c84c733fb7c96a0e5e4d7679195f3d73adaa5dbcc0a4c5a7e60470816f398d73bccf698c90cbcafd3aa0a53c0b3e3f912059ce3065e39f57fcc3306b477f18905066eeee99398acbb4f800f408a5086964e028deb55cc87290eaf608c07855d835021c5bfffedf7f5e3f3559d538083ef55e366128050018f035ecb5ad0a68b526e5b0ee6a0c402895180b5d6b1b3b2a4f6c28d3f99cb924e4df6a4b97dd05551670ab9fb96fcf565b8dac0d885d8b44293eb9718d2978f2d1", @ANYBLOB="2c66736e616d653d2b7b256b3a282b252c2c00614a7f72ac577e1309d2afdafa68debf87b13032d38817a259cdfe82aad5a3d7e8f3e1a635103a836e20d25e55d221d828a39b0ede3e1d2d10a8e8ae85da223415a50750fd298acbd0b52d17e806c0d582775551975b530ba5e084b81531a96518074cdf39b18e2f79ff27da6a4650e7aca74f05dc0003f01b57d9796c52f1f48997a031b0bd3ae26355ee3cdbc99445b40119a0"], 0x0) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000200)) 00:45:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000006400310f00400000000000000000000101414792d8550dde8a32de8376c755e7b97fb0c9d1975adc47691076f5dc28f5d41321004e390ff609000000c5eeb7dda28498a4768e3ac1cb3213ec592aaac03c84a4d775142cf668efac", @ANYRES32=r4, @ANYBLOB="00000000f2ffffff000000000b000100666c6f77657200000c00020006005b0000010000"], 0x3c}}, 0x0) 00:45:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x0, 0x6, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x68, 0x0, 0x1f, 0x29, 0x0, @private=0xa010102, @multicast2, {[@ssrr={0x89, 0x7, 0x11, [@multicast2]}, @timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x40}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xff}]}, @timestamp_prespec={0x44, 0x1c, 0xa6, 0x3, 0x8, [{@multicast2, 0x61dd}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0x937}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x82, [@multicast2]}, @end, @ssrr={0x89, 0x13, 0x42, [@loopback, @local, @broadcast, @broadcast]}]}}}}}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x705000, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x7fffffff, 0xc0, &(0x7f0000000100)=""/192, 0x41000, 0x2, '\x00', r0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xe, 0xab, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, r3, r5]}, 0x80) [ 353.129401][ T4203] loop2: detected capacity change from 0 to 4096 [ 353.139795][ T4204] loop5: detected capacity change from 0 to 512 [ 353.152643][ T3710] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 353.188092][ T3710] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 37935, setting to 1024 [ 353.205129][ T4203] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 353.220037][ T4204] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 353.252933][ T4208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.266615][ T3710] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 353.281273][ T3710] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d 00:45:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000000c0)) [ 353.366429][ T3710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.462697][ T4175] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 353.733118][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.742078][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.808762][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:45:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) getresgid(0x0, &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="5090626ade00000000cb86306f3030000030303079595fb38cf487c9a86ae05618b1cbe806e64677aa239f666f4e7c63a2b8aadf12de6749a8518d00dcc2b45b2eaf12856f639e7d20a1d806cfe54a4da5f46cf2c6e643099ed2c37ac026a3d2893c869aeca47713baebeac5f757db9a112c121c194253955bee71d5bce9024dca9ff917d75e80c6b3c2227b7472b2acb9bf8d31bae0ad0bd21747bc59e58463f172bcd394aed1e6073e96f382161a2ad59c08ef430263c49d621d3f3bd506d75d8f9b809b033a268d6b88c1790d5d9e5fc6534e9e06f9ea6b34fc4a3a5228913268c9912901d1ce6a2085bc7fff7becdc92b0e2e0c4450e8a8554c2bd594ddb67da7ffa555c3476652005d3", @ANYRES64=r4, @ANYRESDEC=r4]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x6, &(0x7f00000025c0)=[0x0, r5, 0xee01, 0x0, r4, 0xee00]) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) getgroups(0x6, &(0x7f0000000040)=[r8, r7, 0x0, r9, r6, 0xffffffffffffffff]) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 353.861941][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.912025][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.949136][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.128451][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 354.151557][ T27] audit: type=1400 audit(1663202728.691:226): avc: denied { getopt } for pid=4222 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 00:45:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) getresgid(0x0, &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="5090626ade00000000cb86306f3030000030303079595fb38cf487c9a86ae05618b1cbe806e64677aa239f666f4e7c63a2b8aadf12de6749a8518d00dcc2b45b2eaf12856f639e7d20a1d806cfe54a4da5f46cf2c6e643099ed2c37ac026a3d2893c869aeca47713baebeac5f757db9a112c121c194253955bee71d5bce9024dca9ff917d75e80c6b3c2227b7472b2acb9bf8d31bae0ad0bd21747bc59e58463f172bcd394aed1e6073e96f382161a2ad59c08ef430263c49d621d3f3bd506d75d8f9b809b033a268d6b88c1790d5d9e5fc6534e9e06f9ea6b34fc4a3a5228913268c9912901d1ce6a2085bc7fff7becdc92b0e2e0c4450e8a8554c2bd594ddb67da7ffa555c3476652005d3", @ANYRES64=r4, @ANYRESDEC=r4]) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x6, &(0x7f00000025c0)=[0x0, r5, 0xee01, 0x0, r4, 0xee00]) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) getgroups(0x6, &(0x7f0000000040)=[r8, r7, 0x0, r9, r6, 0xffffffffffffffff]) (async) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 354.774460][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.808543][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:45:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x0, 0x6, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x68, 0x0, 0x1f, 0x29, 0x0, @private=0xa010102, @multicast2, {[@ssrr={0x89, 0x7, 0x11, [@multicast2]}, @timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x40}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xff}]}, @timestamp_prespec={0x44, 0x1c, 0xa6, 0x3, 0x8, [{@multicast2, 0x61dd}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0x937}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x82, [@multicast2]}, @end, @ssrr={0x89, 0x13, 0x42, [@loopback, @local, @broadcast, @broadcast]}]}}}}}) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x705000, 0x0) (async) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x7fffffff, 0xc0, &(0x7f0000000100)=""/192, 0x41000, 0x2, '\x00', r0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xe, 0xab, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, r3, r5]}, 0x80) [ 354.850814][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.880482][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:45:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) (async, rerun: 32) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (rerun: 32) ftruncate(r4, 0x800) (async) lseek(r4, 0x200, 0x0) (async) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async, rerun: 64) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (rerun: 64) ftruncate(r6, 0x800) (async) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000000c0)) [ 354.971737][ T3710] usb 1-1: USB disconnect, device number 5 [ 354.982136][ T27] audit: type=1804 audit(1663202729.661:227): pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/15/bus" dev="sda1" ino=1152 res=1 errno=0 [ 355.099982][ T27] audit: type=1800 audit(1663202729.701:228): pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1152 res=0 errno=0 [ 355.441846][ T4210] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.450285][ T4210] bridge0: port 1(bridge_slave_0) entered disabled state 00:45:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000000c0)) 00:45:30 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x0, 0x6, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x68, 0x0, 0x1f, 0x29, 0x0, @private=0xa010102, @multicast2, {[@ssrr={0x89, 0x7, 0x11, [@multicast2]}, @timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x40}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xff}]}, @timestamp_prespec={0x44, 0x1c, 0xa6, 0x3, 0x8, [{@multicast2, 0x61dd}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0x937}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x82, [@multicast2]}, @end, @ssrr={0x89, 0x13, 0x42, [@loopback, @local, @broadcast, @broadcast]}]}}}}}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x705000, 0x0) (async) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) (async) lseek(r4, 0x200, 0x0) (async) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x7fffffff, 0xc0, &(0x7f0000000100)=""/192, 0x41000, 0x2, '\x00', r0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xe, 0xab, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, r3, r5]}, 0x80) 00:45:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) (async) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) (async) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000000c0)) [ 355.521624][ T27] audit: type=1804 audit(1663202730.201:229): pid=4247 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/16/bus" dev="sda1" ino=1177 res=1 errno=0 [ 355.644344][ T27] audit: type=1800 audit(1663202730.241:230): pid=4247 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 355.744820][ T27] audit: type=1804 audit(1663202730.251:231): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir643564599/syzkaller.Elmowz/22/bus" dev="sda1" ino=1155 res=1 errno=0 [ 355.865757][ T27] audit: type=1800 audit(1663202730.251:232): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1155 res=0 errno=0 [ 355.968485][ T27] audit: type=1804 audit(1663202730.321:233): pid=4250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/16/bus" dev="sda1" ino=1177 res=1 errno=0 [ 356.092558][ T27] audit: type=1804 audit(1663202730.351:234): pid=4250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/16/bus" dev="sda1" ino=1177 res=1 errno=0 [ 356.216215][ T27] audit: type=1800 audit(1663202730.351:235): pid=4250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 356.822174][ T4210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.872202][ T4210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.169639][ T4210] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.178632][ T4210] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.187824][ T4210] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.198331][ T4210] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.259365][ T4210] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.268594][ T4210] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.277626][ T4210] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.286558][ T4210] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.313148][ T4210] syz-executor.5 (4210) used greatest stack depth: 22888 bytes left [ 357.331391][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.340029][ T4216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.348749][ T4216] 8021q: adding VLAN 0 to HW filter on device team0 00:45:32 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x80000000, 0x9, 0x9, 0xffffffff, 0x3ff, 0x1000, 0x6}, 0x1c) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/66, 0x42}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f00000004c0)=""/23, 0x17}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000000780)=""/53, 0x35}, {&(0x7f00000007c0)=""/119, 0x77}, {&(0x7f0000000840)=""/161, 0xa1}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/178, 0xb2}], 0xa, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000c40)=""/225, 0xe1}, {&(0x7f0000000d40)=""/250, 0xfa}, {&(0x7f0000000e40)=""/175, 0xaf}, {&(0x7f0000000f00)=""/111, 0x6f}, {&(0x7f0000000f80)=""/134, 0x86}, {&(0x7f0000001040)=""/204, 0xcc}, {&(0x7f0000001140)=""/59, 0x3b}, {&(0x7f0000001180)=""/216, 0xd8}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)=""/85, 0x55}], 0x1, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001680)=""/150, 0x96}, {&(0x7f0000001740)=""/152, 0x98}, {&(0x7f0000001800)=""/189, 0xbd}, {&(0x7f00000018c0)=""/177, 0xb1}], 0x4, &(0x7f00000019c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x4, 0x10000, 0x0) (async) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300), 0x0, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011600), 0x0, 0x4400}, {&(0x7f0000012b00), 0x0, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c000000100008000000", 0x26, 0x8d00}], 0x0, &(0x7f0000013800)=ANY=[], 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010000108000000000054000000000000", @ANYRES32=0x0, @ANYBLOB="0005f69fd5faf00008001b"], 0x28}}, 0x0) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x810, 0xffffffffffffffff, 0xa0eeb000) (async) lseek(0xffffffffffffffff, 0x200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12000) (async) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 00:45:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) getresgid(0x0, &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="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", @ANYRES64=r4, @ANYRESDEC=r4]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x6, &(0x7f00000025c0)=[0x0, r5, 0xee01, 0x0, r4, 0xee00]) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) getgroups(0x6, &(0x7f0000000040)=[r8, r7, 0x0, r9, r6, 0xffffffffffffffff]) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 00:45:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000006400310f00400000000000000000000101414792d8550dde8a32de8376c755e7b97fb0c9d1975adc47691076f5dc28f5d41321004e390ff609000000c5eeb7dda28498a4768e3ac1cb3213ec592aaac03c84a4d775142cf668efac", @ANYRES32=r4, @ANYBLOB="00000000f2ffffff000000000b000100666c6f77657200000c00020006005b0000010000"], 0x3c}}, 0x0) 00:45:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000000c0)) 00:45:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="5eb6aff6cceb97012e4af541b4000000000000006111180000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xf7e2}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003480)=ANY=[@ANYBLOB="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"/4221], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, r2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x12, &(0x7f0000000100)=""/18, 0x41100, 0x14, '\x00', 0x0, 0x1a, r1, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x9, 0x2, 0x2}, 0x10, r2, r0}, 0x80) 00:45:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) getresgid(0x0, &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="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", @ANYRES64=r4, @ANYRESDEC=r4]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x6, &(0x7f00000025c0)=[0x0, r5, 0xee01, 0x0, r4, 0xee00]) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) (async, rerun: 64) getgroups(0x6, &(0x7f0000000040)=[r8, r7, 0x0, r9, r6, 0xffffffffffffffff]) (async, rerun: 64) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 357.359644][ T4216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.377420][ T4217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:45:33 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x4b74, &(0x7f0000000240)={0x0, 0xd10d, 0x10, 0x3, 0x25d, 0x0, r1}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x5) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) [ 358.402237][ C0] sched: RT throttling activated 00:45:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="5eb6aff6cceb97012e4af541b4000000000000006111180000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xf7e2}}, './file0\x00'}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003480)=ANY=[@ANYBLOB="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"/4221], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, r2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x12, &(0x7f0000000100)=""/18, 0x41100, 0x14, '\x00', 0x0, 0x1a, r1, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x9, 0x2, 0x2}, 0x10, r2, r0}, 0x80) 00:45:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000006400310f00400000000000000000000101414792d8550dde8a32de8376c755e7b97fb0c9d1975adc47691076f5dc28f5d41321004e390ff609000000c5eeb7dda28498a4768e3ac1cb3213ec592aaac03c84a4d775142cf668efac", @ANYRES32=r4, @ANYBLOB="00000000f2ffffff000000000b000100666c6f77657200000c00020006005b0000010000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000006400310f00400000000000000000000101414792d8550dde8a32de8376c755e7b97fb0c9d1975adc47691076f5dc28f5d41321004e390ff609000000c5eeb7dda28498a4768e3ac1cb3213ec592aaac03c84a4d775142cf668efac", @ANYRES32=r4, @ANYBLOB="00000000f2ffffff000000000b000100666c6f77657200000c00020006005b0000010000"], 0x3c}}, 0x0) (async) [ 358.543554][ T4281] loop5: detected capacity change from 0 to 512 00:45:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="5eb6aff6cceb97012e4af541b4000000000000006111180000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xf7e2}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003480)=ANY=[@ANYBLOB="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"/4221], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, r2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x12, &(0x7f0000000100)=""/18, 0x41100, 0x14, '\x00', 0x0, 0x1a, r1, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x9, 0x2, 0x2}, 0x10, r2, r0}, 0x80) 00:45:33 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x8, 0x65}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x545400, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = getpid() r5 = syz_open_dev$audion(&(0x7f0000000180), 0xffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003, 0x20010, r5, 0xed76e000) sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0xd8, 0x10, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="b6e63897d00a6e4133a4144bd3abd8d4471264c68b37168cbc39f91d987869705a20040acd861930f24fb2286c", @nested={0x4, 0x72}, @typed={0x4, 0x44}, @generic="12936d66600879c1781012b7b313901d27a45dd19485a29a685566b6b232f3645209bbae0dc5e187a365c8f40aff0356611136555fdb38e47a777a253e676674824ca7190b758fef98c09cb3ed9de0d2d3d2b1f62aa51eed4bee4022bea70a69105346cdf6b6c0f9cd70372eb224d836e6696773", @generic="8a2031723d371529d262ea03d9b4e960e5effa4eea33de0f2520bb9ecba6"]}, 0xd8}, {&(0x7f0000001b00)={0x2224, 0x10, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@generic="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", @nested={0x1020, 0x8c, 0x0, 0x1, [@typed={0x5, 0x44, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@local}, @generic="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"]}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@local}, @generic="ab53218575dd3339daee7eb47f67cd221aad97b9ec1cf906bcc8e880a9abb33b2ff538f3f044ad2df4fccc52ecfe7a6fa6a8cdad2eaca8411bc15e38dee8b6f1ad45017052b4ca416956c70aec4f130011c9c097fc249af3bc75a1f82c48c2d45e468abfc80e7966d1ef5ff17c08d7711ce41ea3ec7e6009a8aa4371339ebe988e7921625523d00ce49a10c05859e41e656d3070234c", @generic="b32146795987fb2672bd6f6659ddd9b8a6699f3f1c33bcfcc89b72165441943c09c1ca9a8f508a9863042c46f55a8226b7f272b9fb60a0fc6d77407a0f003cf4fa3ee341d25dd1c5ae3bb2ab1d217dc5297d296c960b87b66db75167e16fbe39610a9b25787f22dca5f8e51358f5535755cb3ccd87b2c576e79ccf57cd79a6e47d3193cc5e1efeec9ad35846df0bdbacf948ed3ba918e81a4c2c514cd8587bf883b21f94d93e79b9fd31c6d65f6281b5ae3c18bddf4c8d765e1bcca38809cdd1ab5740", @typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@local}, @typed={0x86, 0xf, 0x0, 0x0, @binary="89248797472c3d54e67167176cde6148438463aea1af50d68d20ab26c6299a28174927d0d80f936fc2240bc72f4c6c8461157e3845f47541cb8cd72b3bca3a828ff59008d1e25c6cf3410118b14d466d9a13039582d14ae0468a44ea3878092a59443a9c1d1b0a19042258c6ca4c72a656b4bd46ca8ef4e8ea17e062712151598b96"}]}, 0x2224}, {&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x60}], 0x3}, 0x0) 00:45:33 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x8, 0x65}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x545400, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = getpid() (async, rerun: 32) r5 = syz_open_dev$audion(&(0x7f0000000180), 0xffff, 0x0) (rerun: 32) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003, 0x20010, r5, 0xed76e000) sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) (async) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0xd8, 0x10, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="b6e63897d00a6e4133a4144bd3abd8d4471264c68b37168cbc39f91d987869705a20040acd861930f24fb2286c", @nested={0x4, 0x72}, @typed={0x4, 0x44}, @generic="12936d66600879c1781012b7b313901d27a45dd19485a29a685566b6b232f3645209bbae0dc5e187a365c8f40aff0356611136555fdb38e47a777a253e676674824ca7190b758fef98c09cb3ed9de0d2d3d2b1f62aa51eed4bee4022bea70a69105346cdf6b6c0f9cd70372eb224d836e6696773", @generic="8a2031723d371529d262ea03d9b4e960e5effa4eea33de0f2520bb9ecba6"]}, 0xd8}, {&(0x7f0000001b00)={0x2224, 0x10, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@generic="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", @nested={0x1020, 0x8c, 0x0, 0x1, [@typed={0x5, 0x44, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@local}, @generic="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"]}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@local}, @generic="ab53218575dd3339daee7eb47f67cd221aad97b9ec1cf906bcc8e880a9abb33b2ff538f3f044ad2df4fccc52ecfe7a6fa6a8cdad2eaca8411bc15e38dee8b6f1ad45017052b4ca416956c70aec4f130011c9c097fc249af3bc75a1f82c48c2d45e468abfc80e7966d1ef5ff17c08d7711ce41ea3ec7e6009a8aa4371339ebe988e7921625523d00ce49a10c05859e41e656d3070234c", @generic="b32146795987fb2672bd6f6659ddd9b8a6699f3f1c33bcfcc89b72165441943c09c1ca9a8f508a9863042c46f55a8226b7f272b9fb60a0fc6d77407a0f003cf4fa3ee341d25dd1c5ae3bb2ab1d217dc5297d296c960b87b66db75167e16fbe39610a9b25787f22dca5f8e51358f5535755cb3ccd87b2c576e79ccf57cd79a6e47d3193cc5e1efeec9ad35846df0bdbacf948ed3ba918e81a4c2c514cd8587bf883b21f94d93e79b9fd31c6d65f6281b5ae3c18bddf4c8d765e1bcca38809cdd1ab5740", @typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@local}, @typed={0x86, 0xf, 0x0, 0x0, @binary="89248797472c3d54e67167176cde6148438463aea1af50d68d20ab26c6299a28174927d0d80f936fc2240bc72f4c6c8461157e3845f47541cb8cd72b3bca3a828ff59008d1e25c6cf3410118b14d466d9a13039582d14ae0468a44ea3878092a59443a9c1d1b0a19042258c6ca4c72a656b4bd46ca8ef4e8ea17e062712151598b96"}]}, 0x2224}, {&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x60}], 0x3}, 0x0) 00:45:33 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x80000000, 0x9, 0x9, 0xffffffff, 0x3ff, 0x1000, 0x6}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/66, 0x42}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f00000004c0)=""/23, 0x17}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000000780)=""/53, 0x35}, {&(0x7f00000007c0)=""/119, 0x77}, {&(0x7f0000000840)=""/161, 0xa1}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/178, 0xb2}], 0xa, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000c40)=""/225, 0xe1}, {&(0x7f0000000d40)=""/250, 0xfa}, {&(0x7f0000000e40)=""/175, 0xaf}, {&(0x7f0000000f00)=""/111, 0x6f}, {&(0x7f0000000f80)=""/134, 0x86}, {&(0x7f0000001040)=""/204, 0xcc}, {&(0x7f0000001140)=""/59, 0x3b}, {&(0x7f0000001180)=""/216, 0xd8}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)=""/85, 0x55}], 0x1, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001680)=""/150, 0x96}, {&(0x7f0000001740)=""/152, 0x98}, {&(0x7f0000001800)=""/189, 0xbd}, {&(0x7f00000018c0)=""/177, 0xb1}], 0x4, &(0x7f00000019c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x4, 0x10000, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300), 0x0, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011600), 0x0, 0x4400}, {&(0x7f0000012b00), 0x0, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c000000100008000000", 0x26, 0x8d00}], 0x0, &(0x7f0000013800)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010000108000000000054000000000000", @ANYRES32=0x0, @ANYBLOB="0005f69fd5faf00008001b"], 0x28}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x810, 0xffffffffffffffff, 0xa0eeb000) lseek(0xffffffffffffffff, 0x200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12000) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x80000000, 0x9, 0x9, 0xffffffff, 0x3ff, 0x1000, 0x6}, 0x1c) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/66, 0x42}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f00000004c0)=""/23, 0x17}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000000780)=""/53, 0x35}, {&(0x7f00000007c0)=""/119, 0x77}, {&(0x7f0000000840)=""/161, 0xa1}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/178, 0xb2}], 0xa, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000c40)=""/225, 0xe1}, {&(0x7f0000000d40)=""/250, 0xfa}, {&(0x7f0000000e40)=""/175, 0xaf}, {&(0x7f0000000f00)=""/111, 0x6f}, {&(0x7f0000000f80)=""/134, 0x86}, {&(0x7f0000001040)=""/204, 0xcc}, {&(0x7f0000001140)=""/59, 0x3b}, {&(0x7f0000001180)=""/216, 0xd8}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)=""/85, 0x55}], 0x1, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001680)=""/150, 0x96}, {&(0x7f0000001740)=""/152, 0x98}, {&(0x7f0000001800)=""/189, 0xbd}, {&(0x7f00000018c0)=""/177, 0xb1}], 0x4, &(0x7f00000019c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x4, 0x10000, 0x0) (async) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300), 0x0, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011600), 0x0, 0x4400}, {&(0x7f0000012b00), 0x0, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c000000100008000000", 0x26, 0x8d00}], 0x0, &(0x7f0000013800)=ANY=[], 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010000108000000000054000000000000", @ANYRES32=0x0, @ANYBLOB="0005f69fd5faf00008001b"], 0x28}}, 0x0) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x810, 0xffffffffffffffff, 0xa0eeb000) (async) lseek(0xffffffffffffffff, 0x200, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12000) (async) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) 00:45:33 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) socket(0x42, 0x5, 0x20) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socketpair(0x1e, 0x3, 0x20, &(0x7f0000000100)={0xffffffffffffffff}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x8) recvfrom$inet(r5, &(0x7f0000000300)=""/147, 0x93, 0x40, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000024000a0f0000000000000000000000001d5c52b3b346702b07becf7be845bdc22629ad8b7275fab857aa3fbf5048d3e5edc925befbcd60b883781dfc84c04ac1761a76dd416655a7dfc66f1060234bfa4b460f646d3ec28fd3472da083b384d0dee73a1695a6758b4a7ddd3255d667d2e3a6023188ca165034efa94012765f0ee987047b7e0ec8761b01000000008000"/165, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001006362710004000200"], 0x30}}, 0x0) 00:45:33 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x8, 0x65}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x545400, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r4 = getpid() (async, rerun: 32) r5 = syz_open_dev$audion(&(0x7f0000000180), 0xffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003, 0x20010, r5, 0xed76e000) (async) sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0xd8, 0x10, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="b6e63897d00a6e4133a4144bd3abd8d4471264c68b37168cbc39f91d987869705a20040acd861930f24fb2286c", @nested={0x4, 0x72}, @typed={0x4, 0x44}, @generic="12936d66600879c1781012b7b313901d27a45dd19485a29a685566b6b232f3645209bbae0dc5e187a365c8f40aff0356611136555fdb38e47a777a253e676674824ca7190b758fef98c09cb3ed9de0d2d3d2b1f62aa51eed4bee4022bea70a69105346cdf6b6c0f9cd70372eb224d836e6696773", @generic="8a2031723d371529d262ea03d9b4e960e5effa4eea33de0f2520bb9ecba6"]}, 0xd8}, {&(0x7f0000001b00)={0x2224, 0x10, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@generic="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", @nested={0x1020, 0x8c, 0x0, 0x1, [@typed={0x5, 0x44, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@local}, @generic="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"]}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@local}, @generic="ab53218575dd3339daee7eb47f67cd221aad97b9ec1cf906bcc8e880a9abb33b2ff538f3f044ad2df4fccc52ecfe7a6fa6a8cdad2eaca8411bc15e38dee8b6f1ad45017052b4ca416956c70aec4f130011c9c097fc249af3bc75a1f82c48c2d45e468abfc80e7966d1ef5ff17c08d7711ce41ea3ec7e6009a8aa4371339ebe988e7921625523d00ce49a10c05859e41e656d3070234c", @generic="b32146795987fb2672bd6f6659ddd9b8a6699f3f1c33bcfcc89b72165441943c09c1ca9a8f508a9863042c46f55a8226b7f272b9fb60a0fc6d77407a0f003cf4fa3ee341d25dd1c5ae3bb2ab1d217dc5297d296c960b87b66db75167e16fbe39610a9b25787f22dca5f8e51358f5535755cb3ccd87b2c576e79ccf57cd79a6e47d3193cc5e1efeec9ad35846df0bdbacf948ed3ba918e81a4c2c514cd8587bf883b21f94d93e79b9fd31c6d65f6281b5ae3c18bddf4c8d765e1bcca38809cdd1ab5740", @typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@local}, @typed={0x86, 0xf, 0x0, 0x0, @binary="89248797472c3d54e67167176cde6148438463aea1af50d68d20ab26c6299a28174927d0d80f936fc2240bc72f4c6c8461157e3845f47541cb8cd72b3bca3a828ff59008d1e25c6cf3410118b14d466d9a13039582d14ae0468a44ea3878092a59443a9c1d1b0a19042258c6ca4c72a656b4bd46ca8ef4e8ea17e062712151598b96"}]}, 0x2224}, {&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x60}], 0x3}, 0x0) 00:45:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000000c0)) [ 359.152047][ T4292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.203118][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 359.203133][ T27] audit: type=1804 audit(1663202733.891:251): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir643564599/syzkaller.Elmowz/26/bus" dev="sda1" ino=1176 res=1 errno=0 [ 359.239412][ T3662] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 359.239516][ T27] audit: type=1800 audit(1663202733.921:252): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1176 res=0 errno=0 00:45:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x4b74, &(0x7f0000000240)={0x0, 0xd10d, 0x10, 0x3, 0x25d, 0x0, r1}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x5) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000040)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_setup(0x4b74, &(0x7f0000000240)={0x0, 0xd10d, 0x10, 0x3, 0x25d, 0x0, r1}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x5) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) (async) 00:45:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x4b74, &(0x7f0000000240)={0x0, 0xd10d, 0x10, 0x3, 0x25d, 0x0, r1}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x5) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) [ 359.284651][ T27] audit: type=1804 audit(1663202733.971:253): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1954673090/syzkaller.ZZDWto/13/bus" dev="sda1" ino=1177 res=1 errno=0 [ 359.313170][ T27] audit: type=1800 audit(1663202733.971:254): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1177 res=0 errno=0 00:45:34 executing program 3: r0 = syz_open_dev$rtc(0x0, 0x8, 0x80000) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x33, 0x1, 0x5, 0xe, 0xb, 0x2, 0x3, 0x800163, 0x1}) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x14de) r2 = syz_usb_connect$cdc_ecm(0x0, 0xd5, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa0, 0x8e, 0xfc, 0x8, 0x846, 0x1001, 0x2393, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0x3f, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x20, 0x8, 0xe2, {0xe2, 0x10, "2ce5a3e2bd7088867b5c10951392f95284d60d061d3de005b2e22e293f81d10c58c821c1cad755fdfc9844cd1d530b4790b9569aa3231d7e514ecfdd3c8403d2413ec3e8b5eee532c3653f8386aa3e7fcb0fe803ee79b8ce8b8c208ffe26cae9e79646c4909a0bdf612c8ab8d49b58dcb52cb4fe9057905af30f8e49c908d1e0dbcfafaed61ed158e02ffe01a7c7d173e24ad5c7cf47154f99a7fd60fe4f7e440b9eff9935d2d7229168620be97a5b6cff29abf0e52ec754d4aec650b4d0f4aaa44a7a2b3be86435a17bd70f85ae5333ddd180e7f6aaf575c9151aec1af2d66b"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)={0x20, 0xb, 0x22, "19d8944407eeddf6d2d4bf0449efbf9aa3eaad55c142c759b8487b7494fd7516fcd7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}}) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0x9, 0x85, {0x85, 0x2f, "5f24cea50fd6bdd2f27439728585d009cc0498aabcc4cf8553d96906016ab2d97db052d62dc028c46b48158c5a981deb0e49f71bbce98ca923143976ecdb4c17adf1c76993ff2cf7c76b264131cb184570828f8fac1459de5164d96fee1aa3d267be5ae3c7bd79b3a1912370788bc86ef59a8c712fb40f6aa3d4acc400f826666d0055"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000540)={0x0, 0x16, 0xd5, "4c0d6ed64f051e645f6c18314fcf4652c0a75c1f8645b7449c9cde69461c9100d6145d0031807d8722b423a8ba4582d63d35a4802228785d5f693ad58ef5386c552b063e227a77f3538cd2321312af8986b6606104c91cba08d0fb7234df5afae440006f5c4ade9535520cbaea40393b9813f0bac52ef0225ad27bd51bd718a1786ec14d10b29b3c7d13b97bb26b74eb897421303720df1b666c62598641c0df9bee33dbdfa257edaac9e799b2613facd8214c18b882d177416844bd7c95a2b15015e5e8e44efcd403f02914720adc2d257075c16f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x2d, 0x20, 0x12, 0x1d, 0x0, 0x7f, 0x3, 0xc0, 0x1}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x15c6) [ 359.372544][ T4312] loop5: detected capacity change from 0 to 512 [ 359.390546][ T27] audit: type=1400 audit(1663202734.071:255): avc: denied { bind } for pid=4302 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.462525][ T4312] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 359.500603][ T27] audit: type=1400 audit(1663202734.071:256): avc: denied { create } for pid=4302 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 359.554819][ T27] audit: type=1804 audit(1663202734.161:257): pid=4314 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1954673090/syzkaller.ZZDWto/13/bus" dev="sda1" ino=1177 res=1 errno=0 00:45:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r1 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_setup(0x4b74, &(0x7f0000000240)={0x0, 0xd10d, 0x10, 0x3, 0x25d, 0x0, r1}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL, 0x5) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) [ 359.680831][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.705425][ T27] audit: type=1804 audit(1663202734.221:258): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1954673090/syzkaller.ZZDWto/13/bus" dev="sda1" ino=1177 res=1 errno=0 [ 359.726697][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.779977][ T3704] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 359.791669][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.792634][ T27] audit: type=1800 audit(1663202734.221:259): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 359.892163][ T4319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:45:34 executing program 5: setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x18, 0x0, 0x80, 0x4, 0x48, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x48) lseek(r0, 0x0, 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="000000000000000024000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 00:45:34 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32) socket(0x42, 0x5, 0x20) (rerun: 32) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async, rerun: 32) lseek(r1, 0x200, 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socketpair(0x1e, 0x3, 0x20, &(0x7f0000000100)={0xffffffffffffffff}) (async, rerun: 32) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x8) (rerun: 32) recvfrom$inet(r5, &(0x7f0000000300)=""/147, 0x93, 0x40, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000024000a0f0000000000000000000000001d5c52b3b346702b07becf7be845bdc22629ad8b7275fab857aa3fbf5048d3e5edc925befbcd60b883781dfc84c04ac1761a76dd416655a7dfc66f1060234bfa4b460f646d3ec28fd3472da083b384d0dee73a1695a6758b4a7ddd3255d667d2e3a6023188ca165034efa94012765f0ee987047b7e0ec8761b01000000008000"/165, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001006362710004000200"], 0x30}}, 0x0) [ 360.023416][ T3662] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 360.089658][ T3704] usb 4-1: Using ep0 maxpacket: 32 00:45:34 executing program 5: setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f00000001c0)='./bus\x00') (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x18, 0x0, 0x80, 0x4, 0x48, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x48) (async) lseek(r0, 0x0, 0x4) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="000000000000000024000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) [ 360.110607][ T4353] overlayfs: failed to resolve './file0': -2 [ 360.140923][ T27] audit: type=1400 audit(1663202734.821:260): avc: denied { map_create } for pid=4352 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 00:45:34 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) socket(0x42, 0x5, 0x20) (async, rerun: 32) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (rerun: 32) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) (async, rerun: 32) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async, rerun: 32) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socketpair(0x1e, 0x3, 0x20, &(0x7f0000000100)={0xffffffffffffffff}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x8) recvfrom$inet(r5, &(0x7f0000000300)=""/147, 0x93, 0x40, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000024000a0f0000000000000000000000001d5c52b3b346702b07becf7be845bdc22629ad8b7275fab857aa3fbf5048d3e5edc925befbcd60b883781dfc84c04ac1761a76dd416655a7dfc66f1060234bfa4b460f646d3ec28fd3472da083b384d0dee73a1695a6758b4a7ddd3255d667d2e3a6023188ca165034efa94012765f0ee987047b7e0ec8761b01000000008000"/165, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001006362710004000200"], 0x30}}, 0x0) 00:45:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) 00:45:34 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000340), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/52) [ 360.255535][ T3704] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 360.277078][ T3704] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 0 00:45:35 executing program 5: setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x18, 0x0, 0x80, 0x4, 0x48, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x48) lseek(r0, 0x0, 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="000000000000000024000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x18, 0x0, 0x80, 0x4, 0x48, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x48) (async) lseek(r0, 0x0, 0x4) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="000000000000000024000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) (async) [ 360.318541][ T3704] usb 4-1: config 1 interface 0 has no altsetting 0 00:45:35 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB='8'], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x323c02, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(r4, &(0x7f0000000080)='./file1\x00', 0x400, 0x44) [ 360.425530][ T4377] overlayfs: failed to resolve './file0': -2 00:45:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x6, &(0x7f0000000000)={0xffffffff, 0x5}) sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) gettid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2000000000000000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000000000000000000400", 0x1e, 0xffffffffffffffff}, {&(0x7f0000000500)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000000000000400200000", 0x1f, 0x1500}, {&(0x7f0000000600)="8081000000180000ddf4655fddf4655fddf4655f00000000000021002000000010000800000000000af302000400000000000000000000000200000030", 0x3d}, {0x0}, {&(0x7f0000000480), 0x0, 0xfffe}, {0x0, 0x0, 0xfffffffffffffffe}], 0x2204450, &(0x7f0000000800)=ANY=[@ANYRES32], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000000680)=""/138) ioctl$TCSETS2(0xffffffffffffffff, 0x5453, 0x0) [ 360.534259][ T3704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.568287][ T3704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:45:35 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB='8'], 0x138) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x323c02, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(r4, &(0x7f0000000080)='./file1\x00', 0x400, 0x44) [ 360.599054][ T3704] usb 4-1: Product: syz [ 360.605717][ T3704] usb 4-1: Manufacturer: syz [ 360.611057][ T3704] usb 4-1: SerialNumber: syz [ 360.750049][ T4395] loop5: detected capacity change from 0 to 264192 [ 360.916896][ T4321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.116896][ T4321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.410183][ T3704] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 361.658621][ T3707] usb 4-1: USB disconnect, device number 3 00:45:36 executing program 3: r0 = syz_open_dev$rtc(0x0, 0x8, 0x80000) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x33, 0x1, 0x5, 0xe, 0xb, 0x2, 0x3, 0x800163, 0x1}) (async) ioctl$RTC_AIE_OFF(r0, 0x7002) (async) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x14de) r2 = syz_usb_connect$cdc_ecm(0x0, 0xd5, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa0, 0x8e, 0xfc, 0x8, 0x846, 0x1001, 0x2393, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0x3f, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x20, 0x8, 0xe2, {0xe2, 0x10, "2ce5a3e2bd7088867b5c10951392f95284d60d061d3de005b2e22e293f81d10c58c821c1cad755fdfc9844cd1d530b4790b9569aa3231d7e514ecfdd3c8403d2413ec3e8b5eee532c3653f8386aa3e7fcb0fe803ee79b8ce8b8c208ffe26cae9e79646c4909a0bdf612c8ab8d49b58dcb52cb4fe9057905af30f8e49c908d1e0dbcfafaed61ed158e02ffe01a7c7d173e24ad5c7cf47154f99a7fd60fe4f7e440b9eff9935d2d7229168620be97a5b6cff29abf0e52ec754d4aec650b4d0f4aaa44a7a2b3be86435a17bd70f85ae5333ddd180e7f6aaf575c9151aec1af2d66b"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)={0x20, 0xb, 0x22, "19d8944407eeddf6d2d4bf0449efbf9aa3eaad55c142c759b8487b7494fd7516fcd7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}}) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0x9, 0x85, {0x85, 0x2f, "5f24cea50fd6bdd2f27439728585d009cc0498aabcc4cf8553d96906016ab2d97db052d62dc028c46b48158c5a981deb0e49f71bbce98ca923143976ecdb4c17adf1c76993ff2cf7c76b264131cb184570828f8fac1459de5164d96fee1aa3d267be5ae3c7bd79b3a1912370788bc86ef59a8c712fb40f6aa3d4acc400f826666d0055"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000540)={0x0, 0x16, 0xd5, "4c0d6ed64f051e645f6c18314fcf4652c0a75c1f8645b7449c9cde69461c9100d6145d0031807d8722b423a8ba4582d63d35a4802228785d5f693ad58ef5386c552b063e227a77f3538cd2321312af8986b6606104c91cba08d0fb7234df5afae440006f5c4ade9535520cbaea40393b9813f0bac52ef0225ad27bd51bd718a1786ec14d10b29b3c7d13b97bb26b74eb897421303720df1b666c62598641c0df9bee33dbdfa257edaac9e799b2613facd8214c18b882d177416844bd7c95a2b15015e5e8e44efcd403f02914720adc2d257075c16f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}}) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x2d, 0x20, 0x12, 0x1d, 0x0, 0x7f, 0x3, 0xc0, 0x1}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x15c6) 00:45:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) setrlimit(0x6, &(0x7f0000000000)={0xffffffff, 0x5}) sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) gettid() (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) (async) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2000000000000000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000000000000000000400", 0x1e, 0xffffffffffffffff}, {&(0x7f0000000500)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000000000000400200000", 0x1f, 0x1500}, {&(0x7f0000000600)="8081000000180000ddf4655fddf4655fddf4655f00000000000021002000000010000800000000000af302000400000000000000000000000200000030", 0x3d}, {0x0}, {&(0x7f0000000480), 0x0, 0xfffe}, {0x0, 0x0, 0xfffffffffffffffe}], 0x2204450, &(0x7f0000000800)=ANY=[@ANYRES32], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000000680)=""/138) (async) ioctl$TCSETS2(0xffffffffffffffff, 0x5453, 0x0) 00:45:36 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000340), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/52) 00:45:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB='8'], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x323c02, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(r4, &(0x7f0000000080)='./file1\x00', 0x400, 0x44) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000002180), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB='8'], 0x138) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x323c02, 0x0) (async) openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) openat(r4, &(0x7f0000000080)='./file1\x00', 0x400, 0x44) (async) 00:45:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)=0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) sendmmsg$unix(r2, &(0x7f0000007c40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)="09323ceb491aaf8a16260bb2be8f45aa5ccc22ac7d51695282c2443169", 0x1d}, {&(0x7f00000001c0)="57f43dbc09de767b664c4faef9463554f99e51d5abb071a3c49d000f34614da6f10c0ab9", 0x24}, {&(0x7f0000000240)="6494e5bf219327ecdfa315fedd3fdbe3f533a4b072feb1ddd04d705ae9f38add53edeea13d5bbdf0330b53c63db1d4c3", 0x30}, {&(0x7f0000000380)="ab0678cbfdb133628a409b7a4548855ed37c858171ba891a9cc81b3543bf35af9de39679a3d73aef89c28daa1d487ee88590010f7546854c1777b1eda7a45af4bd60b5d0cf872caeed7dee937bac25215425e5ecffebc34ceec746a64bad8407e46fd17680bf9b4ab7eb01afcb13", 0x6e}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}], 0xf0, 0x24000000}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="39862ebcae6c0b6db0f5ad6f6c7a8a375379271661d737cbbc34f0f7343f53d8c75a2566bc97acb461827bfaa7aaaaf65fd852279bfb1423ba7fe46e46f92d", 0x3f}, {&(0x7f00000007c0)="ffdbd8b3db85860f0a9d8034ea8d9d58ab3cc1db3f5ba68018bcfc5f8e1c9089d156a78b1e5c", 0x26}, {&(0x7f0000000800)="d7cb3f5d2fda0ff5ec80b352070cd6229b39e3fb6c695ef69f1db35d7538487f5f8a7798d7976457b2fd7c9d4e48f8994540d3de83c50dafc662d267f759735ac606605067b77968f7acad06f76a420f", 0x50}, {&(0x7f0000000880)="32b8e342e510be10176666da40d37850851e4da029380f263936a2df74d391e2f65690c221042ac40a8a68b629bc80a0012dfcd6a08a559fc228038828e1161ca05b8744935c1e8b38469e9aca9a488ff099028b4f5ee9c7e8039d6f9cca97984cb8c2aaf64b3daf5f0912ae09d2ca58d38a2f8252ae11ef79", 0x79}, {&(0x7f0000003100)="f43ba5367b8a1f891d7ec74e241de045b23911fe3715b6482d2253510d4db0811dceb101f90a88edee1bbb6f42c46de35f42a95eac71626e2a63c8b5c615b3479caa681dc7bc090cc62aa2cdb9a33c327fe7b3806c618c26e5ae7ed8be5657cba07f6843e6241407dfd58d528233a36d62110eedd2d5fe489fd43b12630017b4e9489bd512c3dac17869b3558e76c0fb079c5bad8fbd55817a62b088e340fc179705fe3b9681b75c88b0b48410126e84cb580ed5c86c8bdec1581288692358e0a0b199f20b7f4aaa81fccbe015759cd3fc45cf682cb387b7ed9fc72bf9d8629b94fe1e4619676ba41bdbb6098b2fbfe1c0967b961c26902f3f182ac9ed880196f57e12e0fb7974308949e2c9c34a6f79db8082ced4ac37568e843159e2fbd3c49857992a3e709be505db8e5fbfbd425ef189493c384c83b00450f3f33bfff85eda9382fd3774cb88d5e7fb746928972f424455131427955b346226b6f1732221a0c5e0e0da0b888b01be62595e4565616820b353d1837cbf44a0b0ccae28b3bb2a5e709d09625fd09e4760596e1adf678cb487f905edd2d0aef81c055c9b4de297417f561af81c4b2097160efd1b897c76227d97122ee60e0f862c51d2590b08c90b2bed588d793aa5242b7a80c397b2a6a611ea5ac2f9b2a12eaad1d77fb7acf16dbe022110f56cc7acb0de915fb2a36e0d4ea465670894dd2a02ef3f2e0e33b4527971ecade8b23369dd3554553f2a53751e140ef84f14bbdee9a5f1c6d2985af19c22295cf0cab2ad1069a081959d5fe0e78ac340fbeb43eea277635c2dde28882296f5fbf77afb41ff52fd4dad0230a5eb558866f61e36e6d7759625318c6ae77bd09d33b1b3d9fbb04ad4d1b9d45ab2c317f69053b5ae550f6fa60ec682301a22ad5d59716bdb0010f3901c0c12fed3bd1d0e6cd18a3467fd266f22617c12f4d24fb50efa99fb50c6d6a899cdccc94bc1ebb8a61e02fa9e70d46455e629fbdf6563bc2736c6e49cd9af8475c66d1ad8f8fec257d6190fe0368e7a977880fb417c24ad3584711b54833848977bbf484c1b4ec0769170ce7734931f8e764aa86d48e5261cc4904491af1202aeb3da8cc32741de788caa0a45f24758ac35e0dbec682a9358a2d11187befe1a8e9acedd295ac9d6b114de6a79d80a42021c2a9b7d2701f22ee516c6f9f72ea6233ded75a41f3fbc852a3793260beddbfee4a3804386e7cefc97806719af9abf059e0c0cedb54f7cd58940370b559346a795512cf4dd0188927658913cb5ce2de96db70c79565afae10a75bbcff34cf3897ae7a580d1f591d9f4a6712fdc674e0751a4c16708e6774b692efb2106b84acbba6d92aa2b9bf6403220c05df8ce19c9b74f49ae3236e639e77b66956888d73731f0cc8b75026022277560703aa5a859ff0434823a81117f05326a385adfd3957a1301c7a23546ddc2b107e58532afa80aed6c25055b140c2ad31771e2816b0db77de6b7b080cf57b331ce36c0730aef5fdc86ecd6c3ed8d0b44ffbb59967ed23a8b3b9c2c7cdacc1ddb8a1b586a69f5a58b37ea228c68fac3c341c8e9375db557f240ee160ceca4375ea1705b5f431b2837199f5794df1e11525e51bea061919ef9fea910dfac6da03ced4875f514db44f432137ea042847dba4734b3192b5ac796402e0f4b56f15b06b7bb21f09aa08baa8d91d6595b88f82b8d49a4728c8093bc8b3c37a61a28fe432aac6cdb89049f151f56c1222c49f6e176d0cc9fdde04ce76a6b5c909058a4c37b7788f9a4e44a2fc48aa8846f32ac5bdc5e96aac80ad611f906d2f08f0b180083310f0379a162435ec2b35bdb65dfbd5078b9e98796d105ccd289c1824ad20e6ff02067f7327ad155deb673d7a571c31205c43a0b82705a1d031184f871fe279982f4a12ef99282d856eaecf26b3cec53beae77f8e03f4ef980cf48a92c8b0855f0daece61090e3b66730f484794f42a493b8b40c79fb032381c9ebed82f022da1d4fd82ffb607b225973e690c04b0bb6c552b7f73106df725a1471cf289b43b43f625a3c69483d3a5f6ecbd18129ef2cc3a8fdee7e430cee1379a455f3085f443ce364782b8ca0a9418cb47ba468354e7f40b2821f55cc0afd584ab4a3a2881d2c9ffa884a975860c0c656719acd5f926ec37b821fcbf0af957f3a5e64d81e8bb9c5e5b119ae987801ed493bf93a14228ae959ce330ef5ed8a5ea99c0e869f1a4847d3b33ee61bb4fe0870fb6ac539a3d779f89f2822475dcbe11696ff1ad1334daa6d940a86a4dd58842203fea46960f362c837a80d934a7a8b31c9b51d44d1d9f05e2002ceab74fedce455d3ffa279387246f99d8d769b67e7ff4c38ab1e796407c2a46b5582f0fa45b678f9c6f0de33b3ceab69879b184fd54db3ae9cd6260e2fbcac9dbc3eca94e77c6b92ecdd0c9e77bf10935c882c506b5a7009dfca608822ec1817b55dab45a858c3674567b103dd45f616248b4aba2139221ce0567ec374558ec61388e0899d9bce325deabcd145cb5450e0d887700c1d48cda0851bb35f5e1c0eca588185efdbc2568f6667302b526544d63ad5b0a80772393c64c08f65735d6e492e4bafac8af392f0fd6fe7e724b4ff255087108e99c89f2d40b12cd01ddce957e7d106505049425bf72fcaf772776a1b7fabaf49142e1cff279a6ff7dc699aec6b55fdd66797a8726dbc8bc278f4f2089a7dfdc05f2e27e26e939a9f6978746fe35551dbbfa5bdfcbd233e9e124414c57385017f3d2877205f73d3d5e2c83dec5ff1033cc8b8ef9bef94d586289debebb5be9adc90a9f69a41cde78a5dd0a07713f05c44f0d4c04b845e183d2f65141bd9de753195dbb48a1f8400db0c41569247e4bea0b2f96e27961cd07b6c8695a686e2f4fa6dc3697611291e2c81349d8d1b37f53bdd9e72bccd48c3b14edc601ab86cfb2a44cecbb6d4a24b94a47df2e5807b616424abdb6f8be40042e792b33b532ba3fa602d951b0d290fe1706f4b5886104e67003496ffbfaf74a8533ca8d9077d5040aeb52261e6b0f5b0a88c2603948199f9850d683022b183c8c610788fdaf5b3a672761e488db5045f76b6da0dbd99866dbbc9f46186460c933e919bbbccaf366871bebf8f300bcdab321ccbb9a2cc0a24833bcce08053d69c0d8ad5d037da7d34057dd6346dc88533a62b6b975fb49a7e3164a8991479402d83fa5d17127ad75c91297fdec5e865dae19abb960cd4232caa8ea1a4685338cf8776c8f2ab96b90b536195444da54c8c270943d3701aca716500b04682afa1de3c159126ba6ba350ace77e3c1c566bb0ca6592bdc6fe1454eeac143267d780908bbba17e303a9d9a87408c31ee4f5956d1aea63b1bdcc93ec8938b80d7df6fda36c05023dff61d6bb0cdd51b1a730fd2c46206015b8c6c2b03054588c916dc4716ed6260d84429a06bbf49ccf1b116f6263459a6da8aa13e9a05661bb8749d281375dc2a95ce271f355bf63512b2172a6f27e9828cd2ff87b1b419b6bffa0240239d384a6452161e529f3bf37aef4ab206a776402634b0e4ccaef043f1f98bfd28993305155c75f9ac5946172daf18aaa6f86a416c645596014e253c010386771ff6602e1c0d53615422af00173c281a97c46228e4aed282c443fc85d8222c742913f5f9920af75a1b5c9bf1146939feaedd8ca41616b093246c33029b35939a15de806b9c3b2faa2fa23634b768b38dd1e14ee962eeda4f94f567234dbecac5dc66542c1e10d7360232099ca9f60bf10ed44e6b5bd532fb0a228aa264de245daf257dbe6d56b7b0f9cebc192a14ab80c409d3e2dc3aa94d4c462fd5b1f2f4fe88da6fadd27e84026c30207345c7560d985fcd623be4352854cb5ab5e5875b6a661801f0ffdc13ae3dd3150067b4ababcc49a0cdccfe4b9b2bbbd05da5feb810c27e365036d9db235beaf77ef9f55801b302a7f09e9cca31c3a1bbcc5e3942573c41b336f1a3cdc755c1de5547cfaeb994eaaf03fa2632d69d20022f53edd935a56d95990361e3d8009a776a4e5e55d39f95ab55ae2d8929bec4f6af6b5597bdf90cf49f1fed7341bda34af8ea000f7435d0758d3fc067d939d0469f87ef373a039ad3f97f1cf92eb02a39b5c8994bf1cf2039c546e8813c37b2798b4b4ad44806a0fa08d7fe25dfe2895fa7f8cf8eeec241e343bc82aaa55c0d0123f1aba4363b6687031c79d5308ed9781d240a48c5ac2f158b8a9bbd4d95f7b0f753b4a18dcee882ad585950e6f529e77529f45a20cc6d1a5d7c6b0816b4825cde1743fbc1982fa97911f59fb65b7588c20ebbf4df451c2511dbd7187528c106aff3971d6c778f2d3cbec6bcff8db9d6ce7f7563b27e25c44009f12b7e7b6f779d504a0fd156cd35145511458575d8147d1f9e9fdfdd1cadbbceb446af86f0de6864d95b7e6cd29ac1b12326368305db235e83ff3db5634e610375847490e2e04cfb71782f6b96ff919b9222bcfbe8d15ddbb00acfff66c3b7a7529ebe71adaf12d7f50d7505c519ccd03d439d99d2a48df5854983259344101f88924a4b158bfadc8c6aa3cd43ad7f7fec2cda479342b88ca4387618894fe9f1f7c96925f6fcc5dceed0252b005b349b61d2c07f9f945aed5ea5b0611c54de838b545a0880cb4b534e510945492c88b3341c02e5709c87f3c2c3c0ca6b1286b3bb43ebfd8a4b39b403b97db9b5c9f8905fda85a648354b7749a5b6cb45f26920f4ef10cbe76fbb55dadfcaca8015c31d1c9f6852916fdf51fcf5dc1bf79a0112a1ac71404635b97bd7ae625e146de395aad7a1997e6ed85ebcdb0f8013c3395d7c55ead73ed2395da0da3b7f689a3f04d03cda366e38281baa2a0d191a99fab8cd69bfdcfe18244bb4e6af3c9400c6198b2b9e59e918fd702dc8ad0ab01ac7f9596602618f810fe38d4242901a3263fe92c94fee960e76fbec019f7442d0ec40e6c665aa8d32c9a7c4df3c10ec82cf06ea267a945fabc55f27e0a04565c5a21d1d9e0973f82adfa5c2a6ac505b242cdca96a37e46727c41be13c144b288de90a5ed9790fe6938d3298f9fe27526e2f0089ebd1c575a86f43fdc865accf4053944dac707c563f880018d6739e4ef34ac370dae439b25d98b0affaac38e5dd922f253253eaaf7087224dbd8d0cc570acf6b15708e6c808447570b7f37e832548bbad1fff63a02d626f7c29539fae4f82001a7ce2a3ae0c51aec053596143a8a4302f4fb849ae0b89732a7c81da4e2fef0bfe52df98f17c37c2ea94c3cbea50ce7b5f3ab18f37527cd7ccab3480a572cceb208fea073db3e093e2cbf7a6de7b36d883075a32cee209e8731b6c3573d46b7f62a2c24e7beb0e79b293dfa2d4a42a22a5a99728437183ba6d9ce6655e3196e060ba37dc17862065ee46cc3f956c43b46ff3b54d6f62035085850a58f8a80cd53638200c529e1f326a0e1188763c6027c9f211c7c13a845e1422f3660803dbb4660d2c0f10b02de7a6c9378ff32c76d618cbe36505feb0e601b940f6646d91c64c2718c386366349e50e88f91e4b23673a9d54923201bd482fee70a8477bb5a79632c64898eca4ab1432f49891187077ef2a47ca1369622c8e8b1dd97607c5c0d098a249b98d5d856807977875504290b76f9325ceabf70f714cf2d738cee5785301d42ffe0fb039b2db2c4743decf48400a6728d97610816e1e4a60411e8007155d3dc96af7fdb313813487cf6d8d39e8217fc166a036c26061d074a29abdb64d4402814041e2b0831aa6977f252aef46631bc75e276aaea731d7e772f96ad6", 0x1000}, {&(0x7f0000000900)="4c5be65df05125f94d28e5e9f39c9ce3ad3e1b46e412a61ffd0b46424a4d43867073879aac3fb467592caa20f8527080253af055f08d521993b41f091f404faf4b8cca199123160569834e77f09fc537fe571468fc42e435da684e4bac530b62ca3ba145ba10959a3fe89a0f035406af1c8820ecbd8287d1438bdcdbe152d464fa27ac1a12273bc302b70936ebf3238251ba40afab43f6135ce82147f3e7c0565b2e132168c665ca75fd818a93985264745d607f2c62057adb97c6dfeac423ad15352b25d0d4c77f8e09e54fb057cda7ebd4f46a282f945b83b6be798b8bc7ba71", 0xe1}, {&(0x7f0000000a00)="2156232dbac471161df0ffd339d3bd18af5cb79a4b094c104a7f316a587a3fba4c799fd7b662a8d2edddd8f1b02f65cfd00bbe5b6d2194644b965eeb5f984c95f877f149f3a13668e7f4e56ccae2f6420748251ac58ac28a81b28a4d97ac5a5544365a", 0x63}], 0x9, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r0, r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, r5}}}], 0x68, 0x800}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x44005}}, {{&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)="083b4897ffff53d11c0cc2f11a77f608539419fc9181d87e91e2e46d5f02ef38f5c3819ca903fbe565f26e9cc0fc0726dba8ee52c2347da0e1e0c9afae5f0a9b28c7c3d379f7277ad80d0cba8ad794077a2ab8e753de56bc99b1feeb4b98a414ed6510a967b5cd85c2384866db5bc528e5cdeb270b13541e110557236975ee9f3753588c96cffcffbbb93289acee0701118ac7efb5233389804440d7d6c351ccfa87750d58500ffb756d05ec278ab0a1ab9167ebaa34e7a75224cc9c362b103b7872c7a45e4e284e7b7e6f7d2b7aa506196c2d71", 0xd4}, {&(0x7f0000000e40)="346fffc7251c0959aaadda25e36fadf167dd91d27ca6a5e7c2aa5bb028de1ad114f36445182dae2f3bdd774f608e34ce", 0x30}, {&(0x7f0000000e80)="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", 0xfe}], 0x3, &(0x7f0000001480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x800}}, {{&(0x7f00000013c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000015c0)="24f43131356245bcfb3b15ceabee014b64ef7ef9686b4fa94115edbe95bc1471f93b48ab32bb94dfe4fc28102b2a3a3cc64cf466758c19f5c730c7d2af19758918ed7c53c4c6734df6cd2a380969a5e1aef4a80909822bb2a73bf31de3003d7b4e16e089350b53ee10d20a", 0x6b}], 0x1, &(0x7f0000001840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c}}], 0x88, 0x20000000}}, {{&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000007240)=[{&(0x7f0000001980)="8c1d996d51f4fdde90f6b0a9d7c8e1a68191e9b858dbcf130d81fd67146c84ad89e7f1c2e3d56632382cb60a1aa8f1614fcfc4286403a273f46d89770ddb8bb393b8b7882ba983f6c190d3abd441cd0e05fe7840735e2b195ccdeedac219dc1e2b34c18a502c95130fbbf3de2e30e487952da6d08a4a34c0f7f79a9460a5861a3a93c7ade372bbfd3cbf79caca4cb660a52c9f5d8ffce1be5b", 0x99}, {&(0x7f0000001a40)="fef69914c64a9029621e9cdd69b2f2f5f0296d3ebf7525c8d54c26309cbbed546cf66e8f71fdbfd437d25fad6aed716be02474915889f6ede58dfbd92f2e105a1a67525523334a06a8a5abc743e2588b5b9fbda4c02579981203c620e98eae4e029da35f291da23732905aa307f0d1e0af2402dfa8d8c9d212c0e94cd374d90ad3faf4488ef816263e33ba8d87509ecda8a041890613cbb6a4415b686a6908f48217a5f7193dfe522d966da90723e61a020828ddeb8a6b3d30919b38d3e3cc43a98bb906", 0xc4}, {&(0x7f0000001b40)="d1ae48fe98939c65934de4d279be237b946e597c6a6fdecd6fedfa62ae93faab11f533ba3fc4c5358c02670f701d36bd20699edb9f392ae1949fd0126cc17e3a56bd891a1827145a8b53b5fc23cf7797cd6183d86e3236aec0770e23af28ee2181df58abf2b42479f969a9d8baa89cdc742f60a94dfb22687132389e973ae6c2b513e9e950cd01073cdce0b763a107073900507be8c01e9c2962d3a9e83e6c21ff0acdd59029eec02e5b8a90e9523ff0353578b5b1d9450e19e65c0c3ca95db44cef61314b3b1737288361980fb41fc4ce3dead8208e0cfcdc9f74", 0xdb}, {&(0x7f0000001c40)="27e8091a42081139db723239ac3e05634365e9a8603e3fb48fb39f55e3a1b4fa84f7bc312d6f2c2f838da30b8b323a97227f34ad7e5c0b19900379ffd2915b60b0e65f69d48bb59626e8e817de5bb17d58230f1597a7afac4d3d43688d1ba329d5bfe8c9ed959d300dd5b6d66dde186a3abfadb5e8a376e515ef1ca430d427589002e8f9f697e72a2614ddf15c96b9dccebeabcc1419a2ea4fb9da9ef0c4134e70", 0xa1}, {&(0x7f0000001d00)="ea5de60c75ed32bde89843c4d94352b1f5a8458024c5053276f47dad31316a579c2ee59bb2138c52d011695d6334f74b31fe714c17422c24ca1901e61213270895251f9f4ab1ef3e5bee65c5a04b99daea3a607a4b72518fd5b6bb42ff266d73e9b21b03e797577c5d18dda21bc0fa0ce162f19fe82974d0dc0b6722067a97790304452f857062c458c2498dc3560a7d1a7a43a1088e609e00d4c133ae49bd67680be35cb85eab1a415c986e2c678aa0c53cf51e9f1b6b00bdd574ef7baa50a68241aed392683f4b906a062d9412ef7a65256881fc507f418f7317de460c6df5b48136124aa93d", 0xe7}, {&(0x7f0000001e00)="934bd3247041766107c5f79502d8530b2ab488e0b4df8653de681fdbbb42ae61e1490b90b45ec28a9711ee098d03d0555ac2fe3000dbcb0dcf59daaf18bb2f99c4f545ff92ee2f0b601b4a738b9b76803a577fe5144ff723b296c510acd6fd85c29ec3864388b2e2204208bbe327dcf3284b88555f82c43a086281884f31463957c34a3826beefd272399f10fa2b26455649c41bcac8e2718ce0601685ff60c65ea6133bb0102fb5dd", 0xa9}, {&(0x7f0000001ec0)="57bfd1946ca74110456baf66b55bd83111c1360f89e0f87c86a83f889aef5894fe2037bffdbf563581cda8d676d191d255173ec239b8546553b1e4c1f53e8632bd23ed45658a2551431dea9255eb0fa05c0a73ca0b395e7bb9eb51bf9bc716c4a91092d20a4332338e45cd2bf82eaddface033058882d798f54c8636ff2ba66344485d528ab608f459a1f360bba4e6a4e0fae1e9c09481ace5e97f42f3e449", 0x9f}, {&(0x7f0000006140)="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", 0x1000}, {&(0x7f0000007140)="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", 0xfd}], 0x9, &(0x7f0000007640)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150, 0x400c080}}, {{&(0x7f00000077c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000007840)="892305eb9fef7df3ce557451b254668bbf6aee0a4c96ce424b339dac80cbed0c24c8067ffd4268ba2c63b88b2f4a0541202d2e7b6bf3842842864d15f4cf57b0583b672a0e3b5631a20e577ed299b516a61a970fe3eff40d2ca1f5099f94e86a9a1665eb04b0a6d3f822174c131bbbfeb037754d19300ab44c713a67663992b5dbfb117e6e60ca7f6dc5dc35ab3520f2d8c45fd76f8301206f1080412a682b234176fd6cf51e377886de1bda3d8181022b91bf3cb7b8a08a601bae5ea945cec18260bdad16c6b389f8240c97a81a4aa2cb", 0xd1}, {&(0x7f0000007940)="1429a4c3e2e10d995ab5513d310f5873a7bc9a8629d3cfd21a4f83724c88d156421033d8ece8441a48f992d7e6693912367891358d80e835a09a6d01359fd0aa1782872dbdc18f44e5fd80acbd6dca4b8660c0ba7d480b6ed6c37330bc7a0fc621e8e2eb52ec69a20110756d5b6d1ea1e871610c71fa448f4d22ddf5e36975180d8faf9324854ea8ae0b6e472c439f0535f918", 0x93}, {&(0x7f0000007a00)="784034cac34bae1c18f0985e5dff5c3116e606ca71a5c1c9a137957b78", 0x1d}], 0x3, &(0x7f0000007a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x4000}}, {{&(0x7f0000007ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007b80)=[{&(0x7f0000007b40)="db9d2d0af7391e5dfcbb20c07eba9694481d82e862ee3ca76d8993dd8bf1d73e356e6b53a28337bdb80f9fa10be18620912edc6c2c7afbe2942205c7c5a2ffdc", 0x40}], 0x1, &(0x7f0000007bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0x48, 0x1}}], 0x8, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x18, 0x0, 0x12, 0x0, 0x0, 0x0, 0x10000000, 0x100000000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='wbt_stat\x00'}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) r8 = socket(0x0, 0x0, 0x0) getsockname$unix(r8, 0x0, &(0x7f0000000280)) syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000000000)="ec8d2fb7b50f", 0x6, 0xfffffffffffffffe}], 0x0, 0x0, 0x0) 00:45:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() setrlimit(0x6, &(0x7f0000000000)={0xffffffff, 0x5}) sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) gettid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2000000000000000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000000000000000000400", 0x1e, 0xffffffffffffffff}, {&(0x7f0000000500)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000000000000400200000", 0x1f, 0x1500}, {&(0x7f0000000600)="8081000000180000ddf4655fddf4655fddf4655f00000000000021002000000010000800000000000af302000400000000000000000000000200000030", 0x3d}, {0x0}, {&(0x7f0000000480), 0x0, 0xfffe}, {0x0, 0x0, 0xfffffffffffffffe}], 0x2204450, &(0x7f0000000800)=ANY=[@ANYRES32], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000000680)=""/138) (async) ioctl$TCSETS2(0xffffffffffffffff, 0x5453, 0x0) 00:45:37 executing program 3: r0 = syz_open_dev$rtc(0x0, 0x8, 0x80000) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x33, 0x1, 0x5, 0xe, 0xb, 0x2, 0x3, 0x800163, 0x1}) (async) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x14de) (async) r2 = syz_usb_connect$cdc_ecm(0x0, 0xd5, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa0, 0x8e, 0xfc, 0x8, 0x846, 0x1001, 0x2393, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0x3f, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x20, 0x8, 0xe2, {0xe2, 0x10, "2ce5a3e2bd7088867b5c10951392f95284d60d061d3de005b2e22e293f81d10c58c821c1cad755fdfc9844cd1d530b4790b9569aa3231d7e514ecfdd3c8403d2413ec3e8b5eee532c3653f8386aa3e7fcb0fe803ee79b8ce8b8c208ffe26cae9e79646c4909a0bdf612c8ab8d49b58dcb52cb4fe9057905af30f8e49c908d1e0dbcfafaed61ed158e02ffe01a7c7d173e24ad5c7cf47154f99a7fd60fe4f7e440b9eff9935d2d7229168620be97a5b6cff29abf0e52ec754d4aec650b4d0f4aaa44a7a2b3be86435a17bd70f85ae5333ddd180e7f6aaf575c9151aec1af2d66b"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)={0x20, 0xb, 0x22, "19d8944407eeddf6d2d4bf0449efbf9aa3eaad55c142c759b8487b7494fd7516fcd7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}}) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0x9, 0x85, {0x85, 0x2f, "5f24cea50fd6bdd2f27439728585d009cc0498aabcc4cf8553d96906016ab2d97db052d62dc028c46b48158c5a981deb0e49f71bbce98ca923143976ecdb4c17adf1c76993ff2cf7c76b264131cb184570828f8fac1459de5164d96fee1aa3d267be5ae3c7bd79b3a1912370788bc86ef59a8c712fb40f6aa3d4acc400f826666d0055"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000540)={0x0, 0x16, 0xd5, "4c0d6ed64f051e645f6c18314fcf4652c0a75c1f8645b7449c9cde69461c9100d6145d0031807d8722b423a8ba4582d63d35a4802228785d5f693ad58ef5386c552b063e227a77f3538cd2321312af8986b6606104c91cba08d0fb7234df5afae440006f5c4ade9535520cbaea40393b9813f0bac52ef0225ad27bd51bd718a1786ec14d10b29b3c7d13b97bb26b74eb897421303720df1b666c62598641c0df9bee33dbdfa257edaac9e799b2613facd8214c18b882d177416844bd7c95a2b15015e5e8e44efcd403f02914720adc2d257075c16f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}}) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x2d, 0x20, 0x12, 0x1d, 0x0, 0x7f, 0x3, 0xc0, 0x1}) (async) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x15c6) 00:45:37 executing program 2: r0 = syz_open_dev$rtc(0x0, 0x8, 0x80000) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x33, 0x1, 0x5, 0xe, 0xb, 0x2, 0x3, 0x800163, 0x1}) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x14de) r2 = syz_usb_connect$cdc_ecm(0x0, 0xd5, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa0, 0x8e, 0xfc, 0x8, 0x846, 0x1001, 0x2393, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0x3f, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x20, 0x8, 0xe2, {0xe2, 0x10, "2ce5a3e2bd7088867b5c10951392f95284d60d061d3de005b2e22e293f81d10c58c821c1cad755fdfc9844cd1d530b4790b9569aa3231d7e514ecfdd3c8403d2413ec3e8b5eee532c3653f8386aa3e7fcb0fe803ee79b8ce8b8c208ffe26cae9e79646c4909a0bdf612c8ab8d49b58dcb52cb4fe9057905af30f8e49c908d1e0dbcfafaed61ed158e02ffe01a7c7d173e24ad5c7cf47154f99a7fd60fe4f7e440b9eff9935d2d7229168620be97a5b6cff29abf0e52ec754d4aec650b4d0f4aaa44a7a2b3be86435a17bd70f85ae5333ddd180e7f6aaf575c9151aec1af2d66b"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)={0x20, 0xb, 0x22, "19d8944407eeddf6d2d4bf0449efbf9aa3eaad55c142c759b8487b7494fd7516fcd7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}}) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0x9, 0x85, {0x85, 0x2f, "5f24cea50fd6bdd2f27439728585d009cc0498aabcc4cf8553d96906016ab2d97db052d62dc028c46b48158c5a981deb0e49f71bbce98ca923143976ecdb4c17adf1c76993ff2cf7c76b264131cb184570828f8fac1459de5164d96fee1aa3d267be5ae3c7bd79b3a1912370788bc86ef59a8c712fb40f6aa3d4acc400f826666d0055"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000540)={0x0, 0x16, 0xd5, "4c0d6ed64f051e645f6c18314fcf4652c0a75c1f8645b7449c9cde69461c9100d6145d0031807d8722b423a8ba4582d63d35a4802228785d5f693ad58ef5386c552b063e227a77f3538cd2321312af8986b6606104c91cba08d0fb7234df5afae440006f5c4ade9535520cbaea40393b9813f0bac52ef0225ad27bd51bd718a1786ec14d10b29b3c7d13b97bb26b74eb897421303720df1b666c62598641c0df9bee33dbdfa257edaac9e799b2613facd8214c18b882d177416844bd7c95a2b15015e5e8e44efcd403f02914720adc2d257075c16f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x2d, 0x20, 0x12, 0x1d, 0x0, 0x7f, 0x3, 0xc0, 0x1}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x15c6) [ 362.392625][ T4437] loop4: detected capacity change from 0 to 16383 00:45:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) 00:45:37 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000340), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/52) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) syz_clone3(&(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000340), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/52) (async) 00:45:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) [ 362.902316][ T3707] usb 3-1: new high-speed USB device number 2 using dummy_hcd 00:45:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) 00:45:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)=0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) sendmmsg$unix(r2, &(0x7f0000007c40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)="09323ceb491aaf8a16260bb2be8f45aa5ccc22ac7d51695282c2443169", 0x1d}, {&(0x7f00000001c0)="57f43dbc09de767b664c4faef9463554f99e51d5abb071a3c49d000f34614da6f10c0ab9", 0x24}, {&(0x7f0000000240)="6494e5bf219327ecdfa315fedd3fdbe3f533a4b072feb1ddd04d705ae9f38add53edeea13d5bbdf0330b53c63db1d4c3", 0x30}, {&(0x7f0000000380)="ab0678cbfdb133628a409b7a4548855ed37c858171ba891a9cc81b3543bf35af9de39679a3d73aef89c28daa1d487ee88590010f7546854c1777b1eda7a45af4bd60b5d0cf872caeed7dee937bac25215425e5ecffebc34ceec746a64bad8407e46fd17680bf9b4ab7eb01afcb13", 0x6e}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}], 0xf0, 0x24000000}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000680)="5096707fae6785123dde29ed624de246dea192720d3af75690bd5a9152885ed931b735b54d05503525a8c41746896620bc86b8debb0af8e19257ff09b86e8b3d707b7eda54069654246977c9acfff77b83922575af90981f5b75eed5cfb272730afe00bba8e170c891c58c3d3d158a9c9d387d9fc9d22896b0bdc42bc246fc980fe8877b74e9d838e1ece43b44e576354eff370e5ea419ce77e987dc726a7d1cadaa5c408a75b274d0731cee5210132b2fa90c6a0d6ea01bfdfa3483fe8a77d1a1908b581fc446bb4351fab1fe84d9d76c9421df8c3d29f78447744016a3a5e90006f634b7d3d04ebdd28b46289e31ad370567b29194d7b5e452a5", 0xfb}, {&(0x7f0000000780)="39862ebcae6c0b6db0f5ad6f6c7a8a375379271661d737cbbc34f0f7343f53d8c75a2566bc97acb461827bfaa7aaaaf65fd852279bfb1423ba7fe46e46f92d", 0x3f}, {&(0x7f00000007c0)="ffdbd8b3db85860f0a9d8034ea8d9d58ab3cc1db3f5ba68018bcfc5f8e1c9089d156a78b1e5c", 0x26}, {&(0x7f0000000800)="d7cb3f5d2fda0ff5ec80b352070cd6229b39e3fb6c695ef69f1db35d7538487f5f8a7798d7976457b2fd7c9d4e48f8994540d3de83c50dafc662d267f759735ac606605067b77968f7acad06f76a420f", 0x50}, {&(0x7f0000000880)="32b8e342e510be10176666da40d37850851e4da029380f263936a2df74d391e2f65690c221042ac40a8a68b629bc80a0012dfcd6a08a559fc228038828e1161ca05b8744935c1e8b38469e9aca9a488ff099028b4f5ee9c7e8039d6f9cca97984cb8c2aaf64b3daf5f0912ae09d2ca58d38a2f8252ae11ef79", 0x79}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000000900)="4c5be65df05125f94d28e5e9f39c9ce3ad3e1b46e412a61ffd0b46424a4d43867073879aac3fb467592caa20f8527080253af055f08d521993b41f091f404faf4b8cca199123160569834e77f09fc537fe571468fc42e435da684e4bac530b62ca3ba145ba10959a3fe89a0f035406af1c8820ecbd8287d1438bdcdbe152d464fa27ac1a12273bc302b70936ebf3238251ba40afab43f6135ce82147f3e7c0565b2e132168c665ca75fd818a93985264745d607f2c62057adb97c6dfeac423ad15352b25d0d4c77f8e09e54fb057cda7ebd4f46a282f945b83b6be798b8bc7ba71", 0xe1}, {&(0x7f0000000a00)="2156232dbac471161df0ffd339d3bd18af5cb79a4b094c104a7f316a587a3fba4c799fd7b662a8d2edddd8f1b02f65cfd00bbe5b6d2194644b965eeb5f984c95f877f149f3a13668e7f4e56ccae2f6420748251ac58ac28a81b28a4d97ac5a5544365a", 0x63}], 0x9, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r0, r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, r5}}}], 0x68, 0x800}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x44005}}, {{&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)="083b4897ffff53d11c0cc2f11a77f608539419fc9181d87e91e2e46d5f02ef38f5c3819ca903fbe565f26e9cc0fc0726dba8ee52c2347da0e1e0c9afae5f0a9b28c7c3d379f7277ad80d0cba8ad794077a2ab8e753de56bc99b1feeb4b98a414ed6510a967b5cd85c2384866db5bc528e5cdeb270b13541e110557236975ee9f3753588c96cffcffbbb93289acee0701118ac7efb5233389804440d7d6c351ccfa87750d58500ffb756d05ec278ab0a1ab9167ebaa34e7a75224cc9c362b103b7872c7a45e4e284e7b7e6f7d2b7aa506196c2d71", 0xd4}, {&(0x7f0000000e40)="346fffc7251c0959aaadda25e36fadf167dd91d27ca6a5e7c2aa5bb028de1ad114f36445182dae2f3bdd774f608e34ce", 0x30}, {&(0x7f0000000e80)="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", 0xfe}], 0x3, &(0x7f0000001480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x800}}, {{&(0x7f00000013c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000015c0)="24f43131356245bcfb3b15ceabee014b64ef7ef9686b4fa94115edbe95bc1471f93b48ab32bb94dfe4fc28102b2a3a3cc64cf466758c19f5c730c7d2af19758918ed7c53c4c6734df6cd2a380969a5e1aef4a80909822bb2a73bf31de3003d7b4e16e089350b53ee10d20a", 0x6b}], 0x1, &(0x7f0000001840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c}}], 0x88, 0x20000000}}, {{&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000007240)=[{&(0x7f0000001980)="8c1d996d51f4fdde90f6b0a9d7c8e1a68191e9b858dbcf130d81fd67146c84ad89e7f1c2e3d56632382cb60a1aa8f1614fcfc4286403a273f46d89770ddb8bb393b8b7882ba983f6c190d3abd441cd0e05fe7840735e2b195ccdeedac219dc1e2b34c18a502c95130fbbf3de2e30e487952da6d08a4a34c0f7f79a9460a5861a3a93c7ade372bbfd3cbf79caca4cb660a52c9f5d8ffce1be5b", 0x99}, {&(0x7f0000001a40)="fef69914c64a9029621e9cdd69b2f2f5f0296d3ebf7525c8d54c26309cbbed546cf66e8f71fdbfd437d25fad6aed716be02474915889f6ede58dfbd92f2e105a1a67525523334a06a8a5abc743e2588b5b9fbda4c02579981203c620e98eae4e029da35f291da23732905aa307f0d1e0af2402dfa8d8c9d212c0e94cd374d90ad3faf4488ef816263e33ba8d87509ecda8a041890613cbb6a4415b686a6908f48217a5f7193dfe522d966da90723e61a020828ddeb8a6b3d30919b38d3e3cc43a98bb906", 0xc4}, {&(0x7f0000001b40)="d1ae48fe98939c65934de4d279be237b946e597c6a6fdecd6fedfa62ae93faab11f533ba3fc4c5358c02670f701d36bd20699edb9f392ae1949fd0126cc17e3a56bd891a1827145a8b53b5fc23cf7797cd6183d86e3236aec0770e23af28ee2181df58abf2b42479f969a9d8baa89cdc742f60a94dfb22687132389e973ae6c2b513e9e950cd01073cdce0b763a107073900507be8c01e9c2962d3a9e83e6c21ff0acdd59029eec02e5b8a90e9523ff0353578b5b1d9450e19e65c0c3ca95db44cef61314b3b1737288361980fb41fc4ce3dead8208e0cfcdc9f74", 0xdb}, {&(0x7f0000001c40)="27e8091a42081139db723239ac3e05634365e9a8603e3fb48fb39f55e3a1b4fa84f7bc312d6f2c2f838da30b8b323a97227f34ad7e5c0b19900379ffd2915b60b0e65f69d48bb59626e8e817de5bb17d58230f1597a7afac4d3d43688d1ba329d5bfe8c9ed959d300dd5b6d66dde186a3abfadb5e8a376e515ef1ca430d427589002e8f9f697e72a2614ddf15c96b9dccebeabcc1419a2ea4fb9da9ef0c4134e70", 0xa1}, {&(0x7f0000001d00)="ea5de60c75ed32bde89843c4d94352b1f5a8458024c5053276f47dad31316a579c2ee59bb2138c52d011695d6334f74b31fe714c17422c24ca1901e61213270895251f9f4ab1ef3e5bee65c5a04b99daea3a607a4b72518fd5b6bb42ff266d73e9b21b03e797577c5d18dda21bc0fa0ce162f19fe82974d0dc0b6722067a97790304452f857062c458c2498dc3560a7d1a7a43a1088e609e00d4c133ae49bd67680be35cb85eab1a415c986e2c678aa0c53cf51e9f1b6b00bdd574ef7baa50a68241aed392683f4b906a062d9412ef7a65256881fc507f418f7317de460c6df5b48136124aa93d", 0xe7}, {&(0x7f0000001e00)="934bd3247041766107c5f79502d8530b2ab488e0b4df8653de681fdbbb42ae61e1490b90b45ec28a9711ee098d03d0555ac2fe3000dbcb0dcf59daaf18bb2f99c4f545ff92ee2f0b601b4a738b9b76803a577fe5144ff723b296c510acd6fd85c29ec3864388b2e2204208bbe327dcf3284b88555f82c43a086281884f31463957c34a3826beefd272399f10fa2b26455649c41bcac8e2718ce0601685ff60c65ea6133bb0102fb5dd", 0xa9}, {&(0x7f0000001ec0)="57bfd1946ca74110456baf66b55bd83111c1360f89e0f87c86a83f889aef5894fe2037bffdbf563581cda8d676d191d255173ec239b8546553b1e4c1f53e8632bd23ed45658a2551431dea9255eb0fa05c0a73ca0b395e7bb9eb51bf9bc716c4a91092d20a4332338e45cd2bf82eaddface033058882d798f54c8636ff2ba66344485d528ab608f459a1f360bba4e6a4e0fae1e9c09481ace5e97f42f3e449", 0x9f}, {&(0x7f0000006140)="8f56f254f72df98985163586302864e7312f5c09162ab128699a0d0150a0af9c9a11d332e8836d2de598ef96303b79ccc020b7018fda06542b09bb2d2787bbc526c4e689f4b58fc2ecd46d254c2c63cb3d90a3ba7dbb67fbc653bda4238c3b501962ad70ba3a4446364f54273c2dddb3ad365a0cf2daeb2fa510e100ce2ac0e778f252880765f0705a5b8c8187b0115b3914621980514262309a765efb06a23122a5e53f33ebdf57b529f17aaee8f716e537d228e12fcf5e972d335e7a703e5cde35feb9831ce221f7351c5326c2deea6c2a4136abbdd35482c34a974918e06ab6a8f4042c273e788d35099293e5afd4b3637f1fc9f86ebfc65ce2b7f466e6706ef8c806a1efa1996bb5543e8e87f8cbf323a2c679686f70eb8ddc2c1b3200b7f35be3e5e9ca09387b47032cdd0be25efe7c5adfc39ce230b87ca9de9fbd3e4a221ae3b63190b6d262fa6396dc4042ea5feab92c8987a3bfcd4df0b898d7c7da4b77e7229f920a5e1f78ea83b4cf6338d5db0070f7fdc2f62857925ce32055b9a6d582e262515daf6aae7263891d5b0720cfb69dc12d23e042cd942b9281db37a0905d26344a1924d4bc7ad674810502f7804bf87be3fc0f0c93b4301905a8c8aa51de1339269b7ec44c890b8f8b32756c6715f63609c422aa912575e824e215aa6aea986c2c8a7c2af894dc699e301e2df060486a80d9233a82738fc551099c1a18eea4710c1558511c47f15850705a3a7a3226825adaf359067c6b0237978b9efd66d4f908ad3d9be4bc890cc81334bc7bdeba7ddf17906e7b73a990215440b0893363d31c3dd5917320908380b81f33e2af6462177a351455dfac8e3189d240513fb05a821129d603d320e0fcbff90aa880fe4d50bb74f92c7a3a24636cfd49a80ee9f4652ba88f18edc2975ced15da5ed611bd69a588b926db99ea44e282cb0759aa5251f010b4b0f3e158f64d18c7434bdbe19b46e07892619e63b0d11e64a4f10533bf2a325e60bbf15df6b855fe055ed1ee2456408fa54d57355073aa68bef01c5c277a1f7d3713ad25f9801c290c836aeaae8fba16a05690e20bd052c31230943449d78f4d2bfd2278bc67eed4ed41cfd4416aac86847ac26197ac4f8f3834b542647cd229765aa22de12203b6e0341291cc5c2f00e67b05a2ec32cadcb1800ae2bc58a4c5780e078f3ff608a42fa9fc5b42db0431732a14f669f02718fbe9505304b0e5eb69936d3487fc7cf5e317b819caf2fdb6b230ef53e1b4b355ed8d69c9568937bcfc59574506c16b79a487d186d696e32438f68c80d6a60f2fbd1408a1733b07821cbcb8d92d2e426d8433e232f610bd5da4688bb91fd19890af66ea6eecfa65586216156ec6e8a6f96415e803f6b55289f1bd9e12b2b05f2a80e8c0224bd4c1ef0108d6749158937a1e5cb14a7f07bced1263a62e013021ad8732b8b504d364779177cb11e70dc8d30e0aab773058e322025b162820851240b3017af66fc02ff81090094e930c18b7a52f6abf078727644eeb43c710f6cc6ea079a03e1c49862895c2e5a4d20b5fba3df9ea8bbcdf92263908d45898dc112092d41b08709b2d207964836467c42ba14a226bab2ef80aec67d496a4cb129b7a5cb710c0c7078ee1723b3cb86615702f33a80a49e0e7f7b22fa5e9799a4672f4ac075bedc4ac275644c9790d38f5d9f1df22771f1ba94f5d61c94be963006f93ac358e65431fe6c031c549887918db4010adb33b2960f391d39c3a79dac4324f074e0a4d2e9e446b76b455faffc88abd0192a529c8d48de7ca9af31a5714239bd3c9af023a90bc6de0f3bb9d7b1af865f8631354fce44bf6d830db7be206726dc4143e6aa163b743def3b90de17683179e84ef9e4cb04fd54667c65ac13d75d7a8c28b923926055e77fb103c472c20d8f20b634eced760277e25a4f17525ce72ebd12e34624b2cbe235b8191c086b0fe6162a95c721d22b29b3cc51a10b75463d50064cf28012180460a0177c6cfc97bae6e49dd1cf608745c78de29eb31f221af3e8bc6a184ad70c136342870a2eba29da8639ec9c9de9a8159c0e3fd600ed5da2f757bcf0194b8f0cffdd2e5e0f652ab654e585840d698f121182a3c2c6ec9cd7a770ac4601cf0eb2be2413b463dd6d7d9d4e0e311c37d6203342ba10ef848d20a331965d056aaa3827421499982a8ceb6fba512f8ed60d66cacda6e14aaa7cbe2d1004f613dad0dee9ea1648900d683ad183420f4eca8017c056cbd40a104005fa73b730d9f50de1cdc58b254b89333590d0a9af61317c11e2a126d68d9a80baac06822324ef19f4a368cff3ef8dd7d96495e8d456e2e1a3a83a116d3c76300dc58181ca2163242a48a5927296ffa9240bf6c574f656f6b89d1116e933d6af44ead6526a31e9d37421db1354bec2f1b9ac948a633abe778958ecc0482c37d76b8b1d43af7e958ff04be28a8290158f745dba473daedfc8d8673c9e5815a530abc261560e62149d42dd97f40ad5ba172d8c458f1bc134c95d4a47c87ad3aeade33c6988d0b680847dc106d207a00d76a4a294fc3b52db873ee6bd721b82d2fde5d1b3fc4f9b91f261ff425f34954bb557e1efa6142f310494768796596d908248dfa46d36560635c5677053448fea296a5896f0f00f569ebd137346dd6ef8c5ce35c479b5663f30b7dbba62c66cdd20b1fffbd4c6d2827227ac6199371abbdf1bb01ebc245894c22d347651799ea65e8ef7ba5c86c775c9a09ff4b979c0017bc1dd2f9925caedd6b7cc6193e8e6c2f75589d7b3c87cb9dc3db3393d603bdd70149cf2b93d3f2cf42f9264f53b58025e01f1524f15da98494c51fcfe0fc8cd6595c1503a5955a33078efe3a98aefc08c25399430c685b7ec2b357c4b032cf0ae0fe9f65dc9f2cd482cafd151f7350d89242d290626ba5ea6108bf0ecd2f50db07e0c6f950576e1e8871c151b7170bd8942cb574809b92aa403f4a305261132235cc88e35b7d33df3b2b88a4bfa36db1e1f96ede5896e3c266918118142d90d1adcabfee3f66aa99ec60f280cdef7fbe4258886e3f89b7395fb75729bad60d98b5dc1f4e1f891a3616c01c2aa393472e6a0aef22e0aeed8ac8284005a5b89eebc58f2beeb367bd55797662b1a04f2f3471c9286cefa67470fb968e3482183777da36c0bfae8b796ae8f96832d1cee03a6d4aa85c7102020c09c69b3c221a188001393832c6078feb291e1e46f84ff61f1719c86d530b05c6bdd9a06cced618f1576fb9c0e62b0692c0df648c109d62eaa5a94646998886a56a11970197e3f0c69143160c874bc3a4ee1f306837ce884720e3843ad33d54fba5fc3ba6d2126a1594ba42165aa2e466d81abe8adead0385fbf9247aa06ecac8b3e0a81051f98d4ce4a892fbe9c19e2b9e77fea2931405fa1bd61a82a36d1f1e8858371439fa1e5d1c5e974d68f8a8dd5854dd4b730f916217d3d78091129a647d7e3982c17c9b6cbb6550c28740114ae0402d754da45b35904eff3beea8d1a827b0aacf8890db8c18cd11c3c352997fedb63dbb9a4fea4297d9f30d2cd7b39be5ae13fba37c8cd2f66f356aa2fa4e24df512bb3d60d8001707cde009e3d642af52869b5e2f967b33dea125ac902e8704384f2dffb3a058e49f4ebf647b1c9c96ef4733a90cd74633474d5d9198b58c99f9060eab71808d1e6a667076a30d058690dee1065c4a5e1a336e62acf2e715b89a337d355cf1a2c682efd4f7eb520a71a30df6fbdadb8e4839b5f0119cd424c93b0f6c883a1d2208eb639f4678fabff335e86cbd1e3ef0cdbe1d06bda128ba79049aaef2b44d3b28ad2d217e8faa2e91ca3852fad8632c72f9fb732fec4f2d5900522f8252f2d7d662a44a9596b0378db625842a2de750800503d3fa29942be081a3178be074f1ee4a03c504c7a8cf93645e0f892a8e89f1fb6281297470dc95b01d9b78eebabf6dce69115198f84174d2056d16b75f846919c6b92685c93dda157da0905112ed97d665602003d72e307d2b874f732b2e0c50ab49981c01cb1c3d62644097008e1aeddd147db1b9761903acd8305cf99090a1fd92e0ffa1cfa768853e6605be4bcfa6ba33a35d4f42f342a0f05a96dc0719c21efe47a8548e1877ebcef0c1f985d8dc9e1f98aa072ac5d2ab28dab74686364a5c3c0402b349a1f64c7bd9a592a10ef5f1ba3a92e0d30a4cbf07c029659676dcce82dbacd617a03db2e63dcb10b2dc1541a57a0c88da5b6391674f2b37c1225f8252d6af796a1f0da04ec57a7d890df1ad2e1acc2b8ca16402e6a73dd646b7d7ceea549f557e54d14915307240bff73f637b92531ac8a4894839b332a58675b2da819562bda65577a95a375c7aa899590d75a3b3a04ba8e4c266399e19e46a68e2a19549abc6099448d53c4e27449b9b817e171355b0160d7d2c9c09543fe51e34773412a4077b3bceda49086d10a86e920776c74241223e03d36e0c80f22a60cc66d3c1d4438b327090b40affc096688173696434eb6d5fab94dbd8083ccd263a3fa84e269113dbe1569a6b3454f0acbad2ef110839ea70d742c82403ace47d68aead21a8a97d3db9f454c1cc3c2956b1b67e3da747baae24aeb1195958fc821553324e3152056ac019916c4d30ac95eec8dbd15f6ca0076a6d6cf47b4b472af86acf3376a4813c0305aaf468fee3d5094d79fecde7488d3443ed93aec3a9f2a29367e17073c906a8ca9ca61a7be919fd6028459a3b6c7b0bd3781ebd0aad9d2d079f37df80dd4c0c4e56ae9ff82e7e3df7794e194f3a6793c1ffbad829400e2cbae297efeb7033a8e61b56c8c20e4e2f96103c6418d970a8d591989cc62a6f27c88d4ff52c569fee942480ea18d88fd0ec6aaaf014c0a6b9c013df38fc1131b2199f7b3f5128dfb3ec2bec56231a9a4aa7f161c44f94c0b411b393fbd506fe3fabd280e0bf926fbf4d58866fd3539ea10bfbec749bfc1e3e049b30c8e5fe4844f96ec2bbcfcfa67d2570ba9f22359a91adfd39790724b093aac0e7f2837b08d1f2cb8f1b0162ec733402ffa58a4138d532fdb00680e14033d32f009aefdbb257d4ea40167e24fb73621f0e567ad8eb981caff0bbdbd75a6df7f5c4674ccb6b7cd41f91bfb9490cc9c14df5a7cafc5acb47c3bac470e4d032b38c2ce547dfed588286cebc6e20837cd444406adf68a389bf1dfd508474b86d5c28b0dd3e84d8dfb508cde2b99082cae0320c41261f37d4cb7c2d8bae01190618323e654481bb3176361670f9a9097bf61e4b23d497a2bfc92ce53b456e95fc5ff5801c4b315f117eca95694f7b63aafd2a10b4a44398f5b66314c202eda6432d49e9789a342ff574ddd03fffce6cbee21f8af16f5e7fcbbe6d93be291f6b3b58fd88e76c587fca49fc13da8ce316073e16053cf32035dbb113d3c8f5723a3f3b6816ac89f7a9e78254a65983be9b349894fb3cb4468d68c6128197c12c599a248b6857430cfe4eda5ae142c146a7740f6432f513e2ba3448a57f0e6fc0a37a26c5c930fee5f4c58a7b4a5f55bce7e5dda7f52bd91ce93ac28154b5f4fb54c76a67e30414c20b46e1a09e61299b2d830a02433cb6488248f80a93094f349c56430eef16eec34c3f74035bbe68fa1d676cb6c23693c2cfb2aab45f55bb514cdb7ba0e66463d2b46d92511cd0ab79078c07b6be521a8960f531bb2ebe42b014493c85b6e6df036b6172f6583118a2cc3a77ae33f2411a151c602fcde50096883cc2c1488712a100995b399cf4e6f8d347573543bc02069327cbbbb0537f5d9737bac201ea4", 0x1000}, {&(0x7f0000007140)="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", 0xfd}], 0x9, &(0x7f0000007640)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150, 0x400c080}}, {{&(0x7f00000077c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000007840)="892305eb9fef7df3ce557451b254668bbf6aee0a4c96ce424b339dac80cbed0c24c8067ffd4268ba2c63b88b2f4a0541202d2e7b6bf3842842864d15f4cf57b0583b672a0e3b5631a20e577ed299b516a61a970fe3eff40d2ca1f5099f94e86a9a1665eb04b0a6d3f822174c131bbbfeb037754d19300ab44c713a67663992b5dbfb117e6e60ca7f6dc5dc35ab3520f2d8c45fd76f8301206f1080412a682b234176fd6cf51e377886de1bda3d8181022b91bf3cb7b8a08a601bae5ea945cec18260bdad16c6b389f8240c97a81a4aa2cb", 0xd1}, {&(0x7f0000007940)="1429a4c3e2e10d995ab5513d310f5873a7bc9a8629d3cfd21a4f83724c88d156421033d8ece8441a48f992d7e6693912367891358d80e835a09a6d01359fd0aa1782872dbdc18f44e5fd80acbd6dca4b8660c0ba7d480b6ed6c37330bc7a0fc621e8e2eb52ec69a20110756d5b6d1ea1e871610c71fa448f4d22ddf5e36975180d8faf9324854ea8ae0b6e472c439f0535f918", 0x93}, {&(0x7f0000007a00)="784034cac34bae1c18f0985e5dff5c3116e606ca71a5c1c9a137957b78", 0x1d}], 0x3, &(0x7f0000007a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x4000}}, {{&(0x7f0000007ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007b80)=[{&(0x7f0000007b40)="db9d2d0af7391e5dfcbb20c07eba9694481d82e862ee3ca76d8993dd8bf1d73e356e6b53a28337bdb80f9fa10be18620912edc6c2c7afbe2942205c7c5a2ffdc", 0x40}], 0x1, &(0x7f0000007bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0x48, 0x1}}], 0x8, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x18, 0x0, 0x12, 0x0, 0x0, 0x0, 0x10000000, 0x100000000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='wbt_stat\x00'}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) r8 = socket(0x0, 0x0, 0x0) getsockname$unix(r8, 0x0, &(0x7f0000000280)) syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000000000)="ec8d2fb7b50f", 0x6, 0xfffffffffffffffe}], 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x2) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) (async) sendmmsg$unix(r2, &(0x7f0000007c40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)="09323ceb491aaf8a16260bb2be8f45aa5ccc22ac7d51695282c2443169", 0x1d}, {&(0x7f00000001c0)="57f43dbc09de767b664c4faef9463554f99e51d5abb071a3c49d000f34614da6f10c0ab9", 0x24}, {&(0x7f0000000240)="6494e5bf219327ecdfa315fedd3fdbe3f533a4b072feb1ddd04d705ae9f38add53edeea13d5bbdf0330b53c63db1d4c3", 0x30}, {&(0x7f0000000380)="ab0678cbfdb133628a409b7a4548855ed37c858171ba891a9cc81b3543bf35af9de39679a3d73aef89c28daa1d487ee88590010f7546854c1777b1eda7a45af4bd60b5d0cf872caeed7dee937bac25215425e5ecffebc34ceec746a64bad8407e46fd17680bf9b4ab7eb01afcb13", 0x6e}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}], 0xf0, 0x24000000}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="39862ebcae6c0b6db0f5ad6f6c7a8a375379271661d737cbbc34f0f7343f53d8c75a2566bc97acb461827bfaa7aaaaf65fd852279bfb1423ba7fe46e46f92d", 0x3f}, {&(0x7f00000007c0)="ffdbd8b3db85860f0a9d8034ea8d9d58ab3cc1db3f5ba68018bcfc5f8e1c9089d156a78b1e5c", 0x26}, {&(0x7f0000000800)="d7cb3f5d2fda0ff5ec80b352070cd6229b39e3fb6c695ef69f1db35d7538487f5f8a7798d7976457b2fd7c9d4e48f8994540d3de83c50dafc662d267f759735ac606605067b77968f7acad06f76a420f", 0x50}, {&(0x7f0000000880)="32b8e342e510be10176666da40d37850851e4da029380f263936a2df74d391e2f65690c221042ac40a8a68b629bc80a0012dfcd6a08a559fc228038828e1161ca05b8744935c1e8b38469e9aca9a488ff099028b4f5ee9c7e8039d6f9cca97984cb8c2aaf64b3daf5f0912ae09d2ca58d38a2f8252ae11ef79", 0x79}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000000900)="4c5be65df05125f94d28e5e9f39c9ce3ad3e1b46e412a61ffd0b46424a4d43867073879aac3fb467592caa20f8527080253af055f08d521993b41f091f404faf4b8cca199123160569834e77f09fc537fe571468fc42e435da684e4bac530b62ca3ba145ba10959a3fe89a0f035406af1c8820ecbd8287d1438bdcdbe152d464fa27ac1a12273bc302b70936ebf3238251ba40afab43f6135ce82147f3e7c0565b2e132168c665ca75fd818a93985264745d607f2c62057adb97c6dfeac423ad15352b25d0d4c77f8e09e54fb057cda7ebd4f46a282f945b83b6be798b8bc7ba71", 0xe1}, {&(0x7f0000000a00)="2156232dbac471161df0ffd339d3bd18af5cb79a4b094c104a7f316a587a3fba4c799fd7b662a8d2edddd8f1b02f65cfd00bbe5b6d2194644b965eeb5f984c95f877f149f3a13668e7f4e56ccae2f6420748251ac58ac28a81b28a4d97ac5a5544365a", 0x63}], 0x9, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r0, r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, r5}}}], 0x68, 0x800}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x44005}}, {{&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)="083b4897ffff53d11c0cc2f11a77f608539419fc9181d87e91e2e46d5f02ef38f5c3819ca903fbe565f26e9cc0fc0726dba8ee52c2347da0e1e0c9afae5f0a9b28c7c3d379f7277ad80d0cba8ad794077a2ab8e753de56bc99b1feeb4b98a414ed6510a967b5cd85c2384866db5bc528e5cdeb270b13541e110557236975ee9f3753588c96cffcffbbb93289acee0701118ac7efb5233389804440d7d6c351ccfa87750d58500ffb756d05ec278ab0a1ab9167ebaa34e7a75224cc9c362b103b7872c7a45e4e284e7b7e6f7d2b7aa506196c2d71", 0xd4}, {&(0x7f0000000e40)="346fffc7251c0959aaadda25e36fadf167dd91d27ca6a5e7c2aa5bb028de1ad114f36445182dae2f3bdd774f608e34ce", 0x30}, {&(0x7f0000000e80)="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", 0xfe}], 0x3, &(0x7f0000001480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x800}}, {{&(0x7f00000013c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000015c0)="24f43131356245bcfb3b15ceabee014b64ef7ef9686b4fa94115edbe95bc1471f93b48ab32bb94dfe4fc28102b2a3a3cc64cf466758c19f5c730c7d2af19758918ed7c53c4c6734df6cd2a380969a5e1aef4a80909822bb2a73bf31de3003d7b4e16e089350b53ee10d20a", 0x6b}], 0x1, &(0x7f0000001840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c}}], 0x88, 0x20000000}}, {{&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000007240)=[{&(0x7f0000001980)="8c1d996d51f4fdde90f6b0a9d7c8e1a68191e9b858dbcf130d81fd67146c84ad89e7f1c2e3d56632382cb60a1aa8f1614fcfc4286403a273f46d89770ddb8bb393b8b7882ba983f6c190d3abd441cd0e05fe7840735e2b195ccdeedac219dc1e2b34c18a502c95130fbbf3de2e30e487952da6d08a4a34c0f7f79a9460a5861a3a93c7ade372bbfd3cbf79caca4cb660a52c9f5d8ffce1be5b", 0x99}, {&(0x7f0000001a40)="fef69914c64a9029621e9cdd69b2f2f5f0296d3ebf7525c8d54c26309cbbed546cf66e8f71fdbfd437d25fad6aed716be02474915889f6ede58dfbd92f2e105a1a67525523334a06a8a5abc743e2588b5b9fbda4c02579981203c620e98eae4e029da35f291da23732905aa307f0d1e0af2402dfa8d8c9d212c0e94cd374d90ad3faf4488ef816263e33ba8d87509ecda8a041890613cbb6a4415b686a6908f48217a5f7193dfe522d966da90723e61a020828ddeb8a6b3d30919b38d3e3cc43a98bb906", 0xc4}, {&(0x7f0000001b40)="d1ae48fe98939c65934de4d279be237b946e597c6a6fdecd6fedfa62ae93faab11f533ba3fc4c5358c02670f701d36bd20699edb9f392ae1949fd0126cc17e3a56bd891a1827145a8b53b5fc23cf7797cd6183d86e3236aec0770e23af28ee2181df58abf2b42479f969a9d8baa89cdc742f60a94dfb22687132389e973ae6c2b513e9e950cd01073cdce0b763a107073900507be8c01e9c2962d3a9e83e6c21ff0acdd59029eec02e5b8a90e9523ff0353578b5b1d9450e19e65c0c3ca95db44cef61314b3b1737288361980fb41fc4ce3dead8208e0cfcdc9f74", 0xdb}, {&(0x7f0000001c40)="27e8091a42081139db723239ac3e05634365e9a8603e3fb48fb39f55e3a1b4fa84f7bc312d6f2c2f838da30b8b323a97227f34ad7e5c0b19900379ffd2915b60b0e65f69d48bb59626e8e817de5bb17d58230f1597a7afac4d3d43688d1ba329d5bfe8c9ed959d300dd5b6d66dde186a3abfadb5e8a376e515ef1ca430d427589002e8f9f697e72a2614ddf15c96b9dccebeabcc1419a2ea4fb9da9ef0c4134e70", 0xa1}, {&(0x7f0000001d00)="ea5de60c75ed32bde89843c4d94352b1f5a8458024c5053276f47dad31316a579c2ee59bb2138c52d011695d6334f74b31fe714c17422c24ca1901e61213270895251f9f4ab1ef3e5bee65c5a04b99daea3a607a4b72518fd5b6bb42ff266d73e9b21b03e797577c5d18dda21bc0fa0ce162f19fe82974d0dc0b6722067a97790304452f857062c458c2498dc3560a7d1a7a43a1088e609e00d4c133ae49bd67680be35cb85eab1a415c986e2c678aa0c53cf51e9f1b6b00bdd574ef7baa50a68241aed392683f4b906a062d9412ef7a65256881fc507f418f7317de460c6df5b48136124aa93d", 0xe7}, {&(0x7f0000001e00)="934bd3247041766107c5f79502d8530b2ab488e0b4df8653de681fdbbb42ae61e1490b90b45ec28a9711ee098d03d0555ac2fe3000dbcb0dcf59daaf18bb2f99c4f545ff92ee2f0b601b4a738b9b76803a577fe5144ff723b296c510acd6fd85c29ec3864388b2e2204208bbe327dcf3284b88555f82c43a086281884f31463957c34a3826beefd272399f10fa2b26455649c41bcac8e2718ce0601685ff60c65ea6133bb0102fb5dd", 0xa9}, {&(0x7f0000001ec0)="57bfd1946ca74110456baf66b55bd83111c1360f89e0f87c86a83f889aef5894fe2037bffdbf563581cda8d676d191d255173ec239b8546553b1e4c1f53e8632bd23ed45658a2551431dea9255eb0fa05c0a73ca0b395e7bb9eb51bf9bc716c4a91092d20a4332338e45cd2bf82eaddface033058882d798f54c8636ff2ba66344485d528ab608f459a1f360bba4e6a4e0fae1e9c09481ace5e97f42f3e449", 0x9f}, {&(0x7f0000006140)="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", 0x1000}, {&(0x7f0000007140)="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", 0xfd}], 0x9, &(0x7f0000007640)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150, 0x400c080}}, {{&(0x7f00000077c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000007840)="892305eb9fef7df3ce557451b254668bbf6aee0a4c96ce424b339dac80cbed0c24c8067ffd4268ba2c63b88b2f4a0541202d2e7b6bf3842842864d15f4cf57b0583b672a0e3b5631a20e577ed299b516a61a970fe3eff40d2ca1f5099f94e86a9a1665eb04b0a6d3f822174c131bbbfeb037754d19300ab44c713a67663992b5dbfb117e6e60ca7f6dc5dc35ab3520f2d8c45fd76f8301206f1080412a682b234176fd6cf51e377886de1bda3d8181022b91bf3cb7b8a08a601bae5ea945cec18260bdad16c6b389f8240c97a81a4aa2cb", 0xd1}, {&(0x7f0000007940)="1429a4c3e2e10d995ab5513d310f5873a7bc9a8629d3cfd21a4f83724c88d156421033d8ece8441a48f992d7e6693912367891358d80e835a09a6d01359fd0aa1782872dbdc18f44e5fd80acbd6dca4b8660c0ba7d480b6ed6c37330bc7a0fc621e8e2eb52ec69a20110756d5b6d1ea1e871610c71fa448f4d22ddf5e36975180d8faf9324854ea8ae0b6e472c439f0535f918", 0x93}, {&(0x7f0000007a00)="784034cac34bae1c18f0985e5dff5c3116e606ca71a5c1c9a137957b78", 0x1d}], 0x3, &(0x7f0000007a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x4000}}, {{&(0x7f0000007ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007b80)=[{&(0x7f0000007b40)="db9d2d0af7391e5dfcbb20c07eba9694481d82e862ee3ca76d8993dd8bf1d73e356e6b53a28337bdb80f9fa10be18620912edc6c2c7afbe2942205c7c5a2ffdc", 0x40}], 0x1, &(0x7f0000007bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0x48, 0x1}}], 0x8, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x18, 0x0, 0x12, 0x0, 0x0, 0x0, 0x10000000, 0x100000000000}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='wbt_stat\x00'}, 0x10) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r6, r7, 0x0, 0x20000023896) (async) socket(0x0, 0x0, 0x0) (async) getsockname$unix(r8, 0x0, &(0x7f0000000280)) (async) syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000000000)="ec8d2fb7b50f", 0x6, 0xfffffffffffffffe}], 0x0, 0x0, 0x0) (async) [ 363.152430][ T3707] usb 3-1: Using ep0 maxpacket: 32 [ 363.272766][ T3707] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.299889][ T3707] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 0 [ 363.357086][ T3707] usb 3-1: config 1 interface 0 has no altsetting 0 00:45:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) [ 363.542606][ T3707] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.582650][ T3707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:45:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) [ 363.614440][ T3707] usb 3-1: Product: syz 00:45:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x2) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)=0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) sendmmsg$unix(r2, &(0x7f0000007c40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)="09323ceb491aaf8a16260bb2be8f45aa5ccc22ac7d51695282c2443169", 0x1d}, {&(0x7f00000001c0)="57f43dbc09de767b664c4faef9463554f99e51d5abb071a3c49d000f34614da6f10c0ab9", 0x24}, {&(0x7f0000000240)="6494e5bf219327ecdfa315fedd3fdbe3f533a4b072feb1ddd04d705ae9f38add53edeea13d5bbdf0330b53c63db1d4c3", 0x30}, {&(0x7f0000000380)="ab0678cbfdb133628a409b7a4548855ed37c858171ba891a9cc81b3543bf35af9de39679a3d73aef89c28daa1d487ee88590010f7546854c1777b1eda7a45af4bd60b5d0cf872caeed7dee937bac25215425e5ecffebc34ceec746a64bad8407e46fd17680bf9b4ab7eb01afcb13", 0x6e}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}], 0xf0, 0x24000000}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="39862ebcae6c0b6db0f5ad6f6c7a8a375379271661d737cbbc34f0f7343f53d8c75a2566bc97acb461827bfaa7aaaaf65fd852279bfb1423ba7fe46e46f92d", 0x3f}, {&(0x7f00000007c0)="ffdbd8b3db85860f0a9d8034ea8d9d58ab3cc1db3f5ba68018bcfc5f8e1c9089d156a78b1e5c", 0x26}, {&(0x7f0000000800)="d7cb3f5d2fda0ff5ec80b352070cd6229b39e3fb6c695ef69f1db35d7538487f5f8a7798d7976457b2fd7c9d4e48f8994540d3de83c50dafc662d267f759735ac606605067b77968f7acad06f76a420f", 0x50}, {&(0x7f0000000880)="32b8e342e510be10176666da40d37850851e4da029380f263936a2df74d391e2f65690c221042ac40a8a68b629bc80a0012dfcd6a08a559fc228038828e1161ca05b8744935c1e8b38469e9aca9a488ff099028b4f5ee9c7e8039d6f9cca97984cb8c2aaf64b3daf5f0912ae09d2ca58d38a2f8252ae11ef79", 0x79}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000000900)="4c5be65df05125f94d28e5e9f39c9ce3ad3e1b46e412a61ffd0b46424a4d43867073879aac3fb467592caa20f8527080253af055f08d521993b41f091f404faf4b8cca199123160569834e77f09fc537fe571468fc42e435da684e4bac530b62ca3ba145ba10959a3fe89a0f035406af1c8820ecbd8287d1438bdcdbe152d464fa27ac1a12273bc302b70936ebf3238251ba40afab43f6135ce82147f3e7c0565b2e132168c665ca75fd818a93985264745d607f2c62057adb97c6dfeac423ad15352b25d0d4c77f8e09e54fb057cda7ebd4f46a282f945b83b6be798b8bc7ba71", 0xe1}, {&(0x7f0000000a00)="2156232dbac471161df0ffd339d3bd18af5cb79a4b094c104a7f316a587a3fba4c799fd7b662a8d2edddd8f1b02f65cfd00bbe5b6d2194644b965eeb5f984c95f877f149f3a13668e7f4e56ccae2f6420748251ac58ac28a81b28a4d97ac5a5544365a", 0x63}], 0x9, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r0, r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, r5}}}], 0x68, 0x800}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x44005}}, {{&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)="083b4897ffff53d11c0cc2f11a77f608539419fc9181d87e91e2e46d5f02ef38f5c3819ca903fbe565f26e9cc0fc0726dba8ee52c2347da0e1e0c9afae5f0a9b28c7c3d379f7277ad80d0cba8ad794077a2ab8e753de56bc99b1feeb4b98a414ed6510a967b5cd85c2384866db5bc528e5cdeb270b13541e110557236975ee9f3753588c96cffcffbbb93289acee0701118ac7efb5233389804440d7d6c351ccfa87750d58500ffb756d05ec278ab0a1ab9167ebaa34e7a75224cc9c362b103b7872c7a45e4e284e7b7e6f7d2b7aa506196c2d71", 0xd4}, {&(0x7f0000000e40)="346fffc7251c0959aaadda25e36fadf167dd91d27ca6a5e7c2aa5bb028de1ad114f36445182dae2f3bdd774f608e34ce", 0x30}, {&(0x7f0000000e80)="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", 0xfe}], 0x3, &(0x7f0000001480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x800}}, {{&(0x7f00000013c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000015c0)="24f43131356245bcfb3b15ceabee014b64ef7ef9686b4fa94115edbe95bc1471f93b48ab32bb94dfe4fc28102b2a3a3cc64cf466758c19f5c730c7d2af19758918ed7c53c4c6734df6cd2a380969a5e1aef4a80909822bb2a73bf31de3003d7b4e16e089350b53ee10d20a", 0x6b}], 0x1, &(0x7f0000001840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c}}], 0x88, 0x20000000}}, {{&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000007240)=[{&(0x7f0000001980)="8c1d996d51f4fdde90f6b0a9d7c8e1a68191e9b858dbcf130d81fd67146c84ad89e7f1c2e3d56632382cb60a1aa8f1614fcfc4286403a273f46d89770ddb8bb393b8b7882ba983f6c190d3abd441cd0e05fe7840735e2b195ccdeedac219dc1e2b34c18a502c95130fbbf3de2e30e487952da6d08a4a34c0f7f79a9460a5861a3a93c7ade372bbfd3cbf79caca4cb660a52c9f5d8ffce1be5b", 0x99}, {&(0x7f0000001a40)="fef69914c64a9029621e9cdd69b2f2f5f0296d3ebf7525c8d54c26309cbbed546cf66e8f71fdbfd437d25fad6aed716be02474915889f6ede58dfbd92f2e105a1a67525523334a06a8a5abc743e2588b5b9fbda4c02579981203c620e98eae4e029da35f291da23732905aa307f0d1e0af2402dfa8d8c9d212c0e94cd374d90ad3faf4488ef816263e33ba8d87509ecda8a041890613cbb6a4415b686a6908f48217a5f7193dfe522d966da90723e61a020828ddeb8a6b3d30919b38d3e3cc43a98bb906", 0xc4}, {&(0x7f0000001b40)="d1ae48fe98939c65934de4d279be237b946e597c6a6fdecd6fedfa62ae93faab11f533ba3fc4c5358c02670f701d36bd20699edb9f392ae1949fd0126cc17e3a56bd891a1827145a8b53b5fc23cf7797cd6183d86e3236aec0770e23af28ee2181df58abf2b42479f969a9d8baa89cdc742f60a94dfb22687132389e973ae6c2b513e9e950cd01073cdce0b763a107073900507be8c01e9c2962d3a9e83e6c21ff0acdd59029eec02e5b8a90e9523ff0353578b5b1d9450e19e65c0c3ca95db44cef61314b3b1737288361980fb41fc4ce3dead8208e0cfcdc9f74", 0xdb}, {&(0x7f0000001c40)="27e8091a42081139db723239ac3e05634365e9a8603e3fb48fb39f55e3a1b4fa84f7bc312d6f2c2f838da30b8b323a97227f34ad7e5c0b19900379ffd2915b60b0e65f69d48bb59626e8e817de5bb17d58230f1597a7afac4d3d43688d1ba329d5bfe8c9ed959d300dd5b6d66dde186a3abfadb5e8a376e515ef1ca430d427589002e8f9f697e72a2614ddf15c96b9dccebeabcc1419a2ea4fb9da9ef0c4134e70", 0xa1}, {&(0x7f0000001d00)="ea5de60c75ed32bde89843c4d94352b1f5a8458024c5053276f47dad31316a579c2ee59bb2138c52d011695d6334f74b31fe714c17422c24ca1901e61213270895251f9f4ab1ef3e5bee65c5a04b99daea3a607a4b72518fd5b6bb42ff266d73e9b21b03e797577c5d18dda21bc0fa0ce162f19fe82974d0dc0b6722067a97790304452f857062c458c2498dc3560a7d1a7a43a1088e609e00d4c133ae49bd67680be35cb85eab1a415c986e2c678aa0c53cf51e9f1b6b00bdd574ef7baa50a68241aed392683f4b906a062d9412ef7a65256881fc507f418f7317de460c6df5b48136124aa93d", 0xe7}, {&(0x7f0000001e00)="934bd3247041766107c5f79502d8530b2ab488e0b4df8653de681fdbbb42ae61e1490b90b45ec28a9711ee098d03d0555ac2fe3000dbcb0dcf59daaf18bb2f99c4f545ff92ee2f0b601b4a738b9b76803a577fe5144ff723b296c510acd6fd85c29ec3864388b2e2204208bbe327dcf3284b88555f82c43a086281884f31463957c34a3826beefd272399f10fa2b26455649c41bcac8e2718ce0601685ff60c65ea6133bb0102fb5dd", 0xa9}, {&(0x7f0000001ec0)="57bfd1946ca74110456baf66b55bd83111c1360f89e0f87c86a83f889aef5894fe2037bffdbf563581cda8d676d191d255173ec239b8546553b1e4c1f53e8632bd23ed45658a2551431dea9255eb0fa05c0a73ca0b395e7bb9eb51bf9bc716c4a91092d20a4332338e45cd2bf82eaddface033058882d798f54c8636ff2ba66344485d528ab608f459a1f360bba4e6a4e0fae1e9c09481ace5e97f42f3e449", 0x9f}, {&(0x7f0000006140)="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", 0x1000}, {&(0x7f0000007140)="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", 0xfd}], 0x9, &(0x7f0000007640)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150, 0x400c080}}, {{&(0x7f00000077c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000007840)="892305eb9fef7df3ce557451b254668bbf6aee0a4c96ce424b339dac80cbed0c24c8067ffd4268ba2c63b88b2f4a0541202d2e7b6bf3842842864d15f4cf57b0583b672a0e3b5631a20e577ed299b516a61a970fe3eff40d2ca1f5099f94e86a9a1665eb04b0a6d3f822174c131bbbfeb037754d19300ab44c713a67663992b5dbfb117e6e60ca7f6dc5dc35ab3520f2d8c45fd76f8301206f1080412a682b234176fd6cf51e377886de1bda3d8181022b91bf3cb7b8a08a601bae5ea945cec18260bdad16c6b389f8240c97a81a4aa2cb", 0xd1}, {&(0x7f0000007940)="1429a4c3e2e10d995ab5513d310f5873a7bc9a8629d3cfd21a4f83724c88d156421033d8ece8441a48f992d7e6693912367891358d80e835a09a6d01359fd0aa1782872dbdc18f44e5fd80acbd6dca4b8660c0ba7d480b6ed6c37330bc7a0fc621e8e2eb52ec69a20110756d5b6d1ea1e871610c71fa448f4d22ddf5e36975180d8faf9324854ea8ae0b6e472c439f0535f918", 0x93}, {&(0x7f0000007a00)="784034cac34bae1c18f0985e5dff5c3116e606ca71a5c1c9a137957b78", 0x1d}], 0x3, &(0x7f0000007a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x4000}}, {{&(0x7f0000007ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007b80)=[{&(0x7f0000007b40)="db9d2d0af7391e5dfcbb20c07eba9694481d82e862ee3ca76d8993dd8bf1d73e356e6b53a28337bdb80f9fa10be18620912edc6c2c7afbe2942205c7c5a2ffdc", 0x40}], 0x1, &(0x7f0000007bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0x48, 0x1}}], 0x8, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x18, 0x0, 0x12, 0x0, 0x0, 0x0, 0x10000000, 0x100000000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='wbt_stat\x00'}, 0x10) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) (async) r8 = socket(0x0, 0x0, 0x0) getsockname$unix(r8, 0x0, &(0x7f0000000280)) (async) syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000000000)="ec8d2fb7b50f", 0x6, 0xfffffffffffffffe}], 0x0, 0x0, 0x0) [ 363.635622][ T3707] usb 3-1: Manufacturer: syz [ 363.658897][ T3707] usb 3-1: SerialNumber: syz 00:45:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) [ 363.948060][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.983358][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.043794][ T3707] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 364.325901][ T3701] usb 3-1: USB disconnect, device number 2 00:45:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) 00:45:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB='8'], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x323c02, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(r4, &(0x7f0000000080)='./file1\x00', 0x400, 0x44) [ 364.585690][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 364.585707][ T27] audit: type=1804 audit(1663202739.271:298): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/26/bus" dev="sda1" ino=1167 res=1 errno=0 [ 364.659216][ T27] audit: type=1800 audit(1663202739.271:299): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1167 res=0 errno=0 [ 364.750001][ T27] audit: type=1804 audit(1663202739.431:300): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/26/bus" dev="sda1" ino=1167 res=1 errno=0 00:45:39 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x7fffffffffffffff}], 0x0, &(0x7f00000001c0)=ANY=[], 0x0) 00:45:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) [ 364.826251][ T27] audit: type=1804 audit(1663202739.511:301): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/26/bus" dev="sda1" ino=1167 res=1 errno=0 [ 364.854146][ T27] audit: type=1800 audit(1663202739.511:302): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1167 res=0 errno=0 00:45:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) 00:45:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) 00:45:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB='8'], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x323c02, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(r4, &(0x7f0000000080)='./file1\x00', 0x400, 0x44) 00:45:39 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) [ 364.965908][ T27] audit: type=1804 audit(1663202739.651:303): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1954673090/syzkaller.ZZDWto/18/bus" dev="sda1" ino=1180 res=1 errno=0 [ 365.050751][ T27] audit: type=1804 audit(1663202739.651:304): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir645514572/syzkaller.52FNmr/30/bus" dev="sda1" ino=1181 res=1 errno=0 00:45:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) [ 365.098258][ T4503] loop2: detected capacity change from 0 to 8191 00:45:39 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) set_mempolicy(0x8000, 0x0, 0xffffffffffffffff) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x7fffffffffffffff}], 0x0, &(0x7f00000001c0)=ANY=[], 0x0) [ 365.249734][ T27] audit: type=1800 audit(1663202739.651:305): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1181 res=0 errno=0 00:45:40 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x7fffffffffffffff}], 0x0, &(0x7f00000001c0)=ANY=[], 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) set_mempolicy(0x8000, 0x0, 0xffffffffffffffff) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x7fffffffffffffff}], 0x0, &(0x7f00000001c0)=ANY=[], 0x0) (async) [ 365.380027][ T27] audit: type=1800 audit(1663202739.681:306): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1180 res=0 errno=0 [ 365.468320][ T4513] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 365.501941][ T27] audit: type=1804 audit(1663202739.701:307): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir144378901/syzkaller.RnCRQK/32/bus" dev="sda1" ino=1179 res=1 errno=0 [ 365.557489][ T4516] loop2: detected capacity change from 0 to 8191 00:45:40 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x7fffffffffffffff}], 0x0, &(0x7f00000001c0)=ANY=[], 0x0) 00:45:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r6, r7, 0x0, 0x10000) 00:45:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) [ 365.852683][ T4527] loop2: detected capacity change from 0 to 8191 00:45:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006780), 0x0, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000bc0)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x10c00, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000c40)='cgroup.threads\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @local, 0x8}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="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", 0xad0}, {&(0x7f0000001040)="54ce37a7", 0x4}, {&(0x7f00000010c0)="b5333e8352d1feffe1bd3ba42ab1d8b71209041ed0f16ff681f1e1a7", 0x1c}], 0x3}}, {{&(0x7f0000000c80)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001740)="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", 0x1000}], 0x1, &(0x7f0000000d00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x18}}], 0x2, 0x0) 00:45:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="06555e817053ca"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0), 0x0, 0x80000001, 0xfffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = fsmount(r2, 0x0, 0xf0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000040)={0x1, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:45:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r6, 0x200, 0x0) 00:45:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) [ 366.252057][ T4513] syz-executor.4 (4513) used greatest stack depth: 22680 bytes left 00:45:41 executing program 4: unshare(0x6c060000) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) (async) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) unshare(0x8020200) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) (async) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) (async) unshare(0x44000000) (async) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="06555e817053ca"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0), 0x0, 0x80000001, 0xfffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = fsmount(r2, 0x0, 0xf0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000040)={0x1, 0x9}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:45:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006780), 0x0, 0x4000) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000bc0)) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) (async) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x10c00, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000c40)='cgroup.threads\x00', 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @local, 0x8}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="58c700c7833993d6bae89e69ad75a9c54bd952ecd5db0e276c7c58e6ecf65b4ba911a20699199ac0e82211468e35029c22603ecfc99300dd116ed95baf698d0ed54bd03e0a1bc90aacfb02af74bb86631f4fe09a130fab0559e76f26c9a8560f434260c439b194cd9d9ee330effe7a049c446a202f54ed857f586f7356e30e9b6da64a1cbc2522e2ff095f62146f9512ea57bfcc5f357dfac017b3f786408ca671b430049b64ff2ad13500053952cff94cb01e09bcc09fdd70ed57bc805d82070d0a3a57d7bc746033e487863a44f672f075c3d182b072388902215983e9baf5cbf2c99fb87c5a36388b189266ba0d3342b11d5c0356f3d08f7e34ec5d16fdada756f8926ec70e4764268dec18ea66318b7e27c2facf9227ccddc56259901bdc39ca9e54b71713d3cc69fba2dceedd5a5d5f4f3f0937b38a7ab6f9888318a1de0704a100763c64f3daf010245a6a2244309bca9cd529724590367325584f5a2f3308f6cef01241ab114d722b3d37216c44d0e8d8c3e4ebdb12b6e7f9f9cffd78defcdc042328b931d1dce91f0ebab75c21c9875780e1b4eedd791dd4408612feac1d616b227cf3f53dc92aaee47a4b269e3f00b08c0197ed97191aa22777d548c16d7e8e9ef5587001f4aa0cfa82d14629e1a48ccab7146a970d1300a555dda8f50fc02c1384b507ac6233c6fd5284eaf3e57ee73b1928aed3541ed08c69d3f7342382e9ad53e5cf5f8ef5d5efc997337e162df1cf40e5b89575669186525587540e9e4d58db59e5447d89d0aff7f3fabb4767ddd6bce7339265ce19a87d7b26bf27ad749d97984d902b987eab5f97073da3ee7601b35977400975bf530e397b0c31624ed669002c2d2e9f219a0114a60885f4cca9fe3aae276a335f219883cb7de6d682f15ea4d3fe23fc762ffc6c1fd81ccca5982405ca9fab3798889cc88ca8f107927349eb61e9e0289290c7ea324e8cb7747bce814dddaceff3563b898e68ff03396220cf348b7b490aa0a27b728c2c8eaee38c7ad8c8706800f0081d3fec73fd60b2ec991474f770286f3a67c8ffb4dc1f61917f761f5f59b9068af8f59e24ea1a4c3a43fae3d35958225c6320a8522c3ea94c3155bcb64a763372d1a53eb86d05ae44a0199c1dfba1d57cc545fd17e020fecb13e3e865d60dba6aecbfed84e71f5930f21fbeaaf734d4b6b1bed7dc84b0ca906727cbc517f694a80c3f5d36365c3e10fbbe9ecdf68da9ba40c4f933f45c1e6890cd0af391f8b2b6dd4e70a7d9abe4bdd10718230c0f4dfef2e02bcd26e0b9a5e81f89f8ac808fd0da7323791d42e1fd17e0bab0d09203abe0f927738edcbbe58f7c975c0580e1eaf61d3a455aa787bd7a929b4fd72d2b78a7cd5f51d7c71e4dfce1ea737443d99d1a596e6831b1d69cbd4cb4b28f76bba7653f0874cb7d4166da768d92ccb1af823913e66120ff9c5586bc3f490e3d3452b097349fd4761be327da13fe7681cff8a4248e27e1cb3302bc324a67c345f8f8b7fa86e24437bcc3ae3826b01da0f7b324ba55be43f4a5b3d3bf451b2bd4603e54e0a46b6c223881dec673dd7b849ea7aee6e159c53103af60c7b5c19a07c02cdc8a558b27069d24c99033055f7ce0fe4295d398814c38784dd44a93c341efa5b09995d784b068cbf0636ce63cb58dc924b108d841c37852f2794a227657df26d7181712f01ff63b7558e9306f23a13d26ed2a89c16445bc12bcaa377ea081f691ffa32e1104a6c26ca2fcceaff8c5af4425b435d3c825c320fa05e7e9a43f45bdf3763b0dc9d5dc665df7ec4a181384340d310f063ec72cc3c457b5245c7999b487a09dd69cce1da263682f3d6579bee0199638d83697eb18b3565d0816244b6a30511cd6c457aeda85a2b268b34d1644a56e8442f62456d7233097d98ddb5e7c246f31dda5852529f21f9fd5325f5834f3048e86b95c7c7bc29acd359ee002c857380e976f7e35051d7e0037cd7991d11b43c290d54a3d3d65ad2fa735f9a5443facb3b87f184b5b353a21a17dabdc649d1d7cf7dde05aebaf0e641b106b3e87fb8d8c880b54df7abd3e62180b00ec66354e4d6e2e30f1f91325e0bd19dde10120201ee6dfccd5891cb03c2f30565f4401a77ddaf6c278c984c509defcf7b88f6ff2da168d6d0ee2aaf2b26779751ab9e16d947eefc7edbd210ec77e4ec3f47d5b80bfecc22356a85f205c3606476fb7eeccfa455d5a48b03eb3405c69de208c3f6b6efff78493cc0326cba0e1b43ea4d99982cead6115fb8f373229235bb3554c193902835dffcd64b5fd48880f1471628690317afa0ce1683c2edc09840ff06992d905a29d83578ec0104f05978427567e1ad9cb713a674f84414530d2328c58fd87fa4d99f9766416cbd09ee81e6099fdf0a85e33eb0ba15165f501bcffbd09098a9e305fbf215fac8ae9b9b81a24695553be8cbbb4a72f7fd969d837dd76bbc176530b52f9822d18845d9e171f76d5b8a26b1e571aaad4b0747d1fd507f8dad92c2d42c1b2dc366b02be6bc61b699847349e8edf60872ccc690947a04d33d0f35db4742a3c46a6517eea1f8beae1a7e54224317e361353969ffdb7fcd86f5b1ddeffec1fc7ebad0c62382118224640753e3724baa58dd2eb106fe02771311b14a64ba489c872f27b824a3ca78fc0865c1f78c9b025c3241ad959c222c49c11005c2dff979d704a977a9355c7652986a16b109c8db536adebc927735001b5787355df307a4cc00a02ecf5934617d7fbdc3f7e1fa3701ca7fbf058abfc6543d0cbdb952d835dde2b402698545af0f2c2988f43fbadda82bb2dc229c9bb80715d77ecc23cc2c1d22530b7a7e36a09f8ba7e514c9e498f5f305cbfb956435b5f23897122836ab350e4f552f229fc3aa51557d0090e9dad62ea9a86132aa94e17f725d03ff26e591ec68fe5740a330682821e628ce466244f6b870f97c8018d0a02c6cc22f1070852c48fc6cf541641da17d9f7d4c164e94bb0b6ea5f30d9a891391b8bcca5329c4f80845389e4fae1529faf9396139246e981bafad00e3025eb414648e19c205884e48150dfa131dab3680c45b9874847db248af4e3717653a594f5a06294305ab95d788cabdbb1f4da4efa4202414575dbf73c2b1050469c63f134dfc3db2a70d5d1a4447968c06ec7c960fc558f3a65c61a591d301d644a59849b9d32e07e046942cc7cc7c04ee2d7f07750b834772a11566676e77a15f661f641789fe597c0f476fb2c5da274a4f55d1331cf566e7654a14aeb53ae28ba44af9ff60169cebf0cef758440cb44cdb76d4be35dfba715899d9ff8bdabe7aac143f9726ddedde85168f0e4adafe87862c3a431ea790bb2dc03380de5a55b0e1cb343063a9674411fb7b2756c264b4340d86db919ac05bac81be98e9a2a312eb145fc6407c14fd8ed3bffa51a5cf811ccd1836a7a60d233ab1b837e08dc79a135d0460c32d94e33f5e786c315fb93bd941ad32cc41c39be2da46ee86dd24de310eff546e68b09b86757798768b7e00723c010aca87301e194efabfe069b2c5c80c7258dfced2daaaf5e94ec73f7828ed1faf0ab3abf96b5b1550cf3ef17c1045a4a4557813281373413425c092e91ecf13e36c0974256b467ef6653d85a07b874c039a95f53b34ca194c8e240ae9f1b7cdc3fe3f1ae43507a39b19e4efb4cb52b2e590e1f1fbc793aba5457db28b5e06440954510b76e3d18ae28aa3bf10b479bec34c7b4552d5c96d2552a36e2e0012473844d15d843d62cba3dc5a0ff74633a66a9adab8706238158015e98cd30b4b0d0a788486ee59f44754b966d1bea0213939da55b826925f73be153d21f1e53b90ec81bcd0509000000000000efa425f6afa59fd2f7b8883eb1f7f7cc67b39f82c0828b5979d2f33922514a9598ddcb486a", 0xad0}, {&(0x7f0000001040)="54ce37a7", 0x4}, {&(0x7f00000010c0)="b5333e8352d1feffe1bd3ba42ab1d8b71209041ed0f16ff681f1e1a7", 0x1c}], 0x3}}, {{&(0x7f0000000c80)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001740)="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", 0x1000}], 0x1, &(0x7f0000000d00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x18}}], 0x2, 0x0) 00:45:41 executing program 4: unshare(0x6c060000) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) (async) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) unshare(0x8020200) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) (async) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) (async) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006780), 0x0, 0x4000) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000bc0)) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x10c00, 0x0) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000c40)='cgroup.threads\x00', 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @local, 0x8}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="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", 0xad0}, {&(0x7f0000001040)="54ce37a7", 0x4}, {&(0x7f00000010c0)="b5333e8352d1feffe1bd3ba42ab1d8b71209041ed0f16ff681f1e1a7", 0x1c}], 0x3}}, {{&(0x7f0000000c80)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001740)="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", 0x1000}], 0x1, &(0x7f0000000d00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x18}}], 0x2, 0x0) 00:45:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="06555e817053ca"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) (async) preadv(r2, &(0x7f00000001c0), 0x0, 0x80000001, 0xfffffffe) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r4 = fsmount(r2, 0x0, 0xf0) (rerun: 32) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000040)={0x1, 0x9}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:45:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r6, 0x200, 0x0) 00:45:41 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:41 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) 00:45:42 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) [ 367.409181][ T4598] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 367.629107][ T4611] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 367.738423][ T4619] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:45:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r6, 0x200, 0x0) 00:45:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) 00:45:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) 00:45:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) 00:45:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) 00:45:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:49 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) 00:45:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) 00:45:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) 00:45:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 374.665783][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 374.665800][ T27] audit: type=1804 audit(1663202749.351:365): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005448913/syzkaller.YRi1cQ/35/bus" dev="sda1" ino=1178 res=1 errno=0 [ 374.761580][ T4648] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 374.806739][ T27] audit: type=1800 audit(1663202749.351:366): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1178 res=0 errno=0 00:45:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 374.923298][ T27] audit: type=1804 audit(1663202749.351:367): pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1954673090/syzkaller.ZZDWto/25/bus" dev="sda1" ino=1179 res=1 errno=0 [ 375.068160][ T27] audit: type=1800 audit(1663202749.351:368): pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1179 res=0 errno=0 00:45:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 375.198270][ T27] audit: type=1804 audit(1663202749.351:369): pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/31/bus" dev="sda1" ino=1180 res=1 errno=0 00:45:49 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) [ 375.362374][ T27] audit: type=1800 audit(1663202749.351:370): pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1180 res=0 errno=0 00:45:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) 00:45:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 375.469283][ T27] audit: type=1804 audit(1663202749.441:371): pid=4662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/31/bus" dev="sda1" ino=1180 res=1 errno=0 00:45:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 375.602445][ T27] audit: type=1804 audit(1663202749.451:372): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir643564599/syzkaller.Elmowz/41/bus" dev="sda1" ino=1158 res=1 errno=0 00:45:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 375.660923][ T4684] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 375.721012][ T27] audit: type=1800 audit(1663202749.451:373): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1158 res=0 errno=0 00:45:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 375.835402][ T27] audit: type=1804 audit(1663202750.211:374): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/32/bus" dev="sda1" ino=1166 res=1 errno=0 00:45:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:50 executing program 3: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:45:51 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) 00:45:51 executing program 3: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:51 executing program 3: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:45:51 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:51 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 376.874279][ T4725] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:45:51 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) 00:45:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x200, 0x0) 00:45:52 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) 00:45:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) 00:45:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:52 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:45:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:52 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) [ 377.822156][ T4756] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:45:52 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:45:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) [ 378.383948][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.390273][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 00:45:53 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) 00:45:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) 00:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) 00:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 378.734010][ T4787] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:45:54 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) 00:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 379.677704][ T4820] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 379.723054][ T27] kauditd_printk_skb: 68 callbacks suppressed [ 379.723071][ T27] audit: type=1804 audit(1663202754.411:443): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir645514572/syzkaller.52FNmr/63/bus" dev="sda1" ino=1157 res=1 errno=0 [ 379.843649][ T27] audit: type=1800 audit(1663202754.411:444): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1157 res=0 errno=0 [ 379.936707][ T27] audit: type=1804 audit(1663202754.471:445): pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir643564599/syzkaller.Elmowz/52/bus" dev="sda1" ino=1162 res=1 errno=0 [ 380.030304][ T27] audit: type=1800 audit(1663202754.471:446): pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1162 res=0 errno=0 [ 380.080837][ T27] audit: type=1804 audit(1663202754.511:447): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1954673090/syzkaller.ZZDWto/34/bus" dev="sda1" ino=1170 res=1 errno=0 [ 380.108244][ T27] audit: type=1800 audit(1663202754.511:448): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1170 res=0 errno=0 [ 380.130814][ T27] audit: type=1804 audit(1663202754.521:449): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1954673090/syzkaller.ZZDWto/34/bus" dev="sda1" ino=1170 res=1 errno=0 00:45:55 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) [ 380.433608][ T27] audit: type=1804 audit(1663202755.121:450): pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir643564599/syzkaller.Elmowz/53/bus" dev="sda1" ino=1177 res=1 errno=0 [ 380.575510][ T27] audit: type=1800 audit(1663202755.121:451): pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 00:45:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) [ 380.669152][ T27] audit: type=1804 audit(1663202755.121:452): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/37/bus" dev="sda1" ino=1179 res=1 errno=0 [ 380.737076][ T4851] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:45:56 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) 00:45:56 executing program 3: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2c7e1467, 0x1, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ftruncate(0xffffffffffffffff, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:56 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:45:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 381.559099][ T4872] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 00:45:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:45:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 381.789691][ T4881] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 381.850990][ T4882] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:45:57 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:45:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r4, r5, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 382.580902][ T4907] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:45:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:45:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:59 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:45:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:45:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:45:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) [ 384.777815][ T4936] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 384.861690][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 384.861706][ T27] audit: type=1804 audit(1663202759.541:501): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/42/bus" dev="sda1" ino=1173 res=1 errno=0 00:45:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 385.005235][ T27] audit: type=1800 audit(1663202759.591:502): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1173 res=0 errno=0 [ 385.038396][ T27] audit: type=1804 audit(1663202759.591:503): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/42/bus" dev="sda1" ino=1173 res=1 errno=0 [ 385.073548][ T27] audit: type=1804 audit(1663202759.591:504): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/42/bus" dev="sda1" ino=1173 res=1 errno=0 [ 385.118237][ T27] audit: type=1800 audit(1663202759.591:505): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1173 res=0 errno=0 [ 385.141658][ T27] audit: type=1804 audit(1663202759.691:506): pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/43/bus" dev="sda1" ino=1164 res=1 errno=0 [ 385.170287][ T27] audit: type=1800 audit(1663202759.691:507): pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1164 res=0 errno=0 00:46:02 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) 00:46:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) 00:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) [ 388.217547][ T27] audit: type=1804 audit(1663202762.901:508): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/44/bus" dev="sda1" ino=1177 res=1 errno=0 [ 388.294066][ T27] audit: type=1800 audit(1663202762.931:509): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 00:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 388.413421][ T27] audit: type=1804 audit(1663202763.101:510): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/45/bus" dev="sda1" ino=1183 res=1 errno=0 [ 388.462287][ T4985] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:03 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) 00:46:03 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 389.316603][ T5007] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 389.421159][ T5009] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:04 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) 00:46:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:04 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) [ 390.148918][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 390.148934][ T27] audit: type=1804 audit(1663202764.831:516): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/48/bus" dev="sda1" ino=1161 res=1 errno=0 00:46:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 390.301403][ T27] audit: type=1800 audit(1663202764.891:517): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1161 res=0 errno=0 [ 390.378812][ T5041] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 390.422083][ T27] audit: type=1804 audit(1663202765.101:518): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/49/bus" dev="sda1" ino=1169 res=1 errno=0 [ 390.491571][ T27] audit: type=1800 audit(1663202765.101:519): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1169 res=0 errno=0 [ 390.560728][ T5046] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:46:05 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:05 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:05 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 391.119884][ T27] audit: type=1804 audit(1663202765.801:520): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/50/bus" dev="sda1" ino=1177 res=1 errno=0 00:46:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:06 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 391.294701][ T27] audit: type=1800 audit(1663202765.801:521): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 391.354101][ T5070] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 391.432185][ T27] audit: type=1804 audit(1663202766.001:522): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/51/bus" dev="sda1" ino=1177 res=1 errno=0 [ 391.551829][ T27] audit: type=1800 audit(1663202766.001:523): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 391.616239][ T27] audit: type=1804 audit(1663202766.181:524): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/52/bus" dev="sda1" ino=1162 res=1 errno=0 [ 391.669152][ T27] audit: type=1800 audit(1663202766.181:525): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1162 res=0 errno=0 00:46:06 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:06 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:06 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:06 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:06 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 392.395187][ T5104] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:46:07 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:07 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:08 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:08 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:09 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:09 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:09 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:09 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 395.207862][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 395.207878][ T27] audit: type=1804 audit(1663202769.891:544): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/61/bus" dev="sda1" ino=1165 res=1 errno=0 [ 395.273095][ T27] audit: type=1800 audit(1663202769.931:545): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1165 res=0 errno=0 00:46:10 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:10 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) [ 395.916732][ T27] audit: type=1804 audit(1663202770.601:546): pid=5207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/62/bus" dev="sda1" ino=1177 res=1 errno=0 00:46:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 396.045282][ T27] audit: type=1800 audit(1663202770.641:547): pid=5207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 396.168539][ T27] audit: type=1804 audit(1663202770.801:548): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/63/bus" dev="sda1" ino=1160 res=1 errno=0 [ 396.207695][ T27] audit: type=1800 audit(1663202770.801:549): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1160 res=0 errno=0 00:46:11 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:11 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 396.890561][ T27] audit: type=1804 audit(1663202771.571:550): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/64/bus" dev="sda1" ino=1177 res=1 errno=0 00:46:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 397.040044][ T27] audit: type=1800 audit(1663202771.611:551): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 397.150021][ T27] audit: type=1804 audit(1663202771.811:552): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/65/bus" dev="sda1" ino=1178 res=1 errno=0 [ 397.267558][ T27] audit: type=1800 audit(1663202771.811:553): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1178 res=0 errno=0 00:46:12 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 1) 00:46:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 2) 00:46:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 398.017255][ T5276] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:14 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 3) 00:46:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 4) 00:46:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) [ 399.630534][ T5311] FAULT_INJECTION: forcing a failure. [ 399.630534][ T5311] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 399.693986][ T5311] CPU: 0 PID: 5311 Comm: syz-executor.4 Not tainted 6.0.0-rc5-syzkaller-00025-g3245cb65fd91 #0 [ 399.704381][ T5311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 399.714464][ T5311] Call Trace: [ 399.717768][ T5311] [ 399.720726][ T5311] dump_stack_lvl+0xcd/0x134 [ 399.725513][ T5311] should_fail.cold+0x5/0xa [ 399.730083][ T5311] _copy_to_user+0x2a/0x140 [ 399.734662][ T5311] simple_read_from_buffer+0xcc/0x160 [ 399.740076][ T5311] proc_fail_nth_read+0x187/0x220 [ 399.745130][ T5311] ? proc_fault_inject_read+0x220/0x220 [ 399.750704][ T5311] ? security_file_permission+0xab/0xd0 [ 399.756370][ T5311] vfs_read+0x257/0x930 [ 399.760559][ T5311] ? proc_fault_inject_read+0x220/0x220 [ 399.766133][ T5311] ? kernel_read+0x1c0/0x1c0 [ 399.770753][ T5311] ? __fget_files+0x26a/0x440 [ 399.775462][ T5311] ksys_read+0x127/0x250 [ 399.779737][ T5311] ? vfs_write+0xdd0/0xdd0 [ 399.784181][ T5311] ? syscall_enter_from_user_mode+0x22/0xb0 [ 399.790132][ T5311] do_syscall_64+0x35/0xb0 [ 399.794628][ T5311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 399.800637][ T5311] RIP: 0033:0x7f7b8823bfbc [ 399.805070][ T5311] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 399.824708][ T5311] RSP: 002b:00007f7b89383160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.833247][ T5311] RAX: ffffffffffffffda RBX: 00007f7b8839bf80 RCX: 00007f7b8823bfbc [ 399.841254][ T5311] RDX: 000000000000000f RSI: 00007f7b893831e0 RDI: 0000000000000004 [ 399.849290][ T5311] RBP: 00007f7b893831d0 R08: 0000000000000000 R09: 0000000100000000 [ 399.857290][ T5311] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 399.865341][ T5311] R13: 00007ffebaf372ff R14: 00007f7b89383300 R15: 0000000000022000 [ 399.873337][ T5311] [ 399.943673][ T5308] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:17 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x2, 0x12, r0, 0x100000000) 00:46:17 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 402.949004][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 402.949020][ T27] audit: type=1804 audit(1663202777.631:562): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/70/bus" dev="sda1" ino=1157 res=1 errno=0 00:46:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x4, 0x12, r0, 0x100000000) [ 403.051266][ T27] audit: type=1800 audit(1663202777.671:563): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1157 res=0 errno=0 [ 403.084719][ T5333] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 403.137910][ T27] audit: type=1804 audit(1663202777.761:564): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/71/bus" dev="sda1" ino=1160 res=1 errno=0 [ 403.179582][ T27] audit: type=1800 audit(1663202777.761:565): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1160 res=0 errno=0 [ 403.203529][ T27] audit: type=1400 audit(1663202777.811:566): avc: denied { execute } for pid=5342 comm="syz-executor.4" path="/dev/dri/card0" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 00:46:18 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:18 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x4000, 0x12, r0, 0x100000000) 00:46:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x400000, 0x12, r0, 0x100000000) 00:46:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:18 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 403.396756][ T27] audit: type=1804 audit(1663202778.081:567): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/72/bus" dev="sda1" ino=1157 res=1 errno=0 00:46:18 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0xf0ff1f, 0x12, r0, 0x100000000) [ 403.506236][ T27] audit: type=1800 audit(1663202778.081:568): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1157 res=0 errno=0 [ 403.555587][ T5367] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 403.606860][ T27] audit: type=1804 audit(1663202778.251:569): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/73/bus" dev="sda1" ino=1178 res=1 errno=0 [ 403.643843][ T27] audit: type=1800 audit(1663202778.251:570): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1178 res=0 errno=0 00:46:18 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x1000000, 0x12, r0, 0x100000000) 00:46:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:18 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x2000000, 0x12, r0, 0x100000000) 00:46:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:19 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 404.360935][ T27] audit: type=1804 audit(1663202779.041:571): pid=5377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/74/bus" dev="sda1" ino=1158 res=1 errno=0 00:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x4000000, 0x12, r0, 0x100000000) [ 404.553534][ T5395] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:19 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x1ffff000, 0x12, r0, 0x100000000) 00:46:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x40000000000000, 0x12, r0, 0x100000000) 00:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0xf0ff1f00000000, 0x12, r0, 0x100000000) [ 405.543362][ T5423] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:20 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x100000000000000, 0x12, r0, 0x100000000) 00:46:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x200000000000000, 0x12, r0, 0x100000000) 00:46:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x400000000000000, 0x12, r0, 0x100000000) [ 406.497283][ T5452] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:21 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000002) 00:46:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000004) 00:46:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 407.470614][ T5466] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:22 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100004000) 00:46:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 408.158103][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 408.158119][ T27] audit: type=1804 audit(1663202782.841:587): pid=5488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/82/bus" dev="sda1" ino=1181 res=1 errno=0 00:46:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100400000) 00:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 408.298073][ T27] audit: type=1800 audit(1663202782.891:588): pid=5488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1181 res=0 errno=0 [ 408.401754][ T27] audit: type=1804 audit(1663202783.081:589): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/83/bus" dev="sda1" ino=1165 res=1 errno=0 [ 408.431859][ T27] audit: type=1800 audit(1663202783.081:590): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 408.473188][ T5506] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:23 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100f0ff1f) 00:46:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x101000000) 00:46:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) [ 409.136525][ T27] audit: type=1804 audit(1663202783.821:591): pid=5516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/84/bus" dev="sda1" ino=1177 res=1 errno=0 [ 409.255437][ T27] audit: type=1800 audit(1663202783.821:592): pid=5516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 00:46:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x102000000) [ 409.336636][ T5531] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 409.384373][ T27] audit: type=1804 audit(1663202783.981:593): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/85/bus" dev="sda1" ino=1175 res=1 errno=0 [ 409.445381][ T27] audit: type=1800 audit(1663202783.981:594): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1175 res=0 errno=0 00:46:24 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) 00:46:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x104000000) 00:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) 00:46:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x11ffff000) 00:46:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 410.068476][ T27] audit: type=1804 audit(1663202784.751:595): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/86/bus" dev="sda1" ino=1157 res=1 errno=0 00:46:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) [ 410.226399][ T27] audit: type=1800 audit(1663202784.751:596): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1157 res=0 errno=0 [ 410.347741][ T5556] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:25 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4004012, r0, 0x100000000) 00:46:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4004012, r0, 0x100000000) 00:46:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) [ 411.151001][ T5580] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:26 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4004012, r0, 0x100000000) 00:46:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) 00:46:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001940)={0x200, 0x6c1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001700)={0x9de18e75, 0xeefb, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001740)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001900)={0x0, 0x7, 0x8000}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/203, 0xcb}, {&(0x7f0000001200)=""/10, 0xa}, {&(0x7f0000001240)=""/117, 0x75}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f00000013c0)=""/150, 0x96}, {&(0x7f0000001480)=""/210, 0xd2}, {&(0x7f0000001580)=""/132, 0x84}], 0x9, 0xee, 0xaa) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001780), 0x600704, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf25340000000600fd000100ec5847807d8cf90600000a00340002020202020200000a0034000202020202020000130034805d44cd9514576d27a882fe520cbb6e00050020010c0000000a000600505050505050000008001f010800000008001f0104000000"], 0x74}, 0x1, 0x0, 0x0, 0xc040880}, 0x804) 00:46:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) 00:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 412.084326][ T5605] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:27 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:27 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001940)={0x200, 0x6c1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001700)={0x9de18e75, 0xeefb, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001740)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001900)={0x0, 0x7, 0x8000}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/203, 0xcb}, {&(0x7f0000001200)=""/10, 0xa}, {&(0x7f0000001240)=""/117, 0x75}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f00000013c0)=""/150, 0x96}, {&(0x7f0000001480)=""/210, 0xd2}, {&(0x7f0000001580)=""/132, 0x84}], 0x9, 0xee, 0xaa) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001780), 0x600704, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf25340000000600fd000100ec5847807d8cf90600000a00340002020202020200000a0034000202020202020000130034805d44cd9514576d27a882fe520cbb6e00050020010c0000000a000600505050505050000008001f010800000008001f0104000000"], 0x74}, 0x1, 0x0, 0x0, 0xc040880}, 0x804) 00:46:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 412.986582][ T5638] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 00:46:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 413.063395][ T5631] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 413.240010][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 413.240027][ T27] audit: type=1804 audit(1663202787.921:615): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/94/bus" dev="sda1" ino=1178 res=1 errno=0 [ 413.332994][ T27] audit: type=1800 audit(1663202787.921:616): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 413.361197][ T27] audit: type=1400 audit(1663202787.961:617): avc: denied { rename } for pid=2953 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 413.392720][ T27] audit: type=1400 audit(1663202787.961:618): avc: denied { unlink } for pid=2953 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 413.416049][ T27] audit: type=1400 audit(1663202787.961:619): avc: denied { create } for pid=2953 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 00:46:28 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001940)={0x200, 0x6c1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001700)={0x9de18e75, 0xeefb, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001740)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001900)={0x0, 0x7, 0x8000}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/203, 0xcb}, {&(0x7f0000001200)=""/10, 0xa}, {&(0x7f0000001240)=""/117, 0x75}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f00000013c0)=""/150, 0x96}, {&(0x7f0000001480)=""/210, 0xd2}, {&(0x7f0000001580)=""/132, 0x84}], 0x9, 0xee, 0xaa) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001780), 0x600704, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf25340000000600fd000100ec5847807d8cf90600000a00340002020202020200000a0034000202020202020000130034805d44cd9514576d27a882fe520cbb6e00050020010c0000000a000600505050505050000008001f010800000008001f0104000000"], 0x74}, 0x1, 0x0, 0x0, 0xc040880}, 0x804) 00:46:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001940)={0x200, 0x6c1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001700)={0x9de18e75, 0xeefb, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001740)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001900)={0x0, 0x7, 0x8000}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/203, 0xcb}, {&(0x7f0000001200)=""/10, 0xa}, {&(0x7f0000001240)=""/117, 0x75}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f00000013c0)=""/150, 0x96}, {&(0x7f0000001480)=""/210, 0xd2}, {&(0x7f0000001580)=""/132, 0x84}], 0x9, 0xee, 0xaa) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001780), 0x600704, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf25340000000600fd000100ec5847807d8cf90600000a00340002020202020200000a0034000202020202020000130034805d44cd9514576d27a882fe520cbb6e00050020010c0000000a000600505050505050000008001f010800000008001f0104000000"], 0x74}, 0x1, 0x0, 0x0, 0xc040880}, 0x804) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) (async) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001940)={0x200, 0x6c1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001700)={0x9de18e75, 0xeefb, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001740)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001900)={0x0, 0x7, 0x8000}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/203, 0xcb}, {&(0x7f0000001200)=""/10, 0xa}, {&(0x7f0000001240)=""/117, 0x75}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f00000013c0)=""/150, 0x96}, {&(0x7f0000001480)=""/210, 0xd2}, {&(0x7f0000001580)=""/132, 0x84}], 0x9, 0xee, 0xaa) (async) openat$null(0xffffffffffffff9c, &(0x7f0000001780), 0x600704, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf25340000000600fd000100ec5847807d8cf90600000a00340002020202020200000a0034000202020202020000130034805d44cd9514576d27a882fe520cbb6e00050020010c0000000a000600505050505050000008001f010800000008001f0104000000"], 0x74}, 0x1, 0x0, 0x0, 0xc040880}, 0x804) (async) 00:46:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 413.801358][ T27] audit: type=1804 audit(1663202788.481:620): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/95/bus" dev="sda1" ino=1166 res=1 errno=0 00:46:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 413.924948][ T27] audit: type=1800 audit(1663202788.521:621): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 413.999003][ T5663] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 414.074694][ T27] audit: type=1804 audit(1663202788.541:622): pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir643564599/syzkaller.Elmowz/120/bus" dev="sda1" ino=1184 res=1 errno=0 00:46:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x28082, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) close_range(r1, r2, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 414.252667][ T27] audit: type=1800 audit(1663202788.541:623): pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1184 res=0 errno=0 [ 414.303588][ T27] audit: type=1804 audit(1663202788.601:624): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005448913/syzkaller.YRi1cQ/97/bus" dev="sda1" ino=1161 res=1 errno=0 00:46:29 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x28082, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) close_range(r1, r2, 0x2) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x28082, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) close_range(r1, r2, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:29 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) [ 415.003089][ T5727] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 415.061467][ T5729] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 00:46:30 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:30 executing program 4: r0 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x4, 0x37, 0x0, 0x64, 0x38, 0x32, 0x64, 0x62, 0x0, 0x61, 0x30, 0x61, 0x66, 0x0, 0x30, 0xa]}, &(0x7f0000000200)={0x0, "d800f67704f1a9e8ce038d8c9a75daf863ac5b565ac67e4e7c3f7a531f932c2e13d9debd481ecc5a9be4521fa54abd61ac0ee80f16b5a9c9ed4c6560995681f0", 0x23}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x1}, r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r2, 0x100000000) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x34]}, &(0x7f00000001c0)={0x0, "fc709c79de9fff85d0de32fc7f0d62fcc9df07ded8876596c5fbd87386766c30eea1632c2db06dcddc8384e24415fdc8066fdd6b92507cdfed9b42829ca9c928"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='keyring\x00', r3) r4 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "fc709c79de9fff85d0de32fc7f0d62fcc9df07ded8876596c5fbd87386766c30eea1632c2db06dcddc8384e24415fdc8066fdd6b92507cdfed9b42829ca9c928"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='keyring\x00', r4) request_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='.request_key_auth\x00', r4) r5 = add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="2788aa68b406b735f44809776170a42bf963d8be010ca10a17385035b216b8180e2a93626c9a77c12ff720da3b8d1988f5", 0x31, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r5, 0x1) 00:46:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:30 executing program 4: r0 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x4, 0x37, 0x0, 0x64, 0x38, 0x32, 0x64, 0x62, 0x0, 0x61, 0x30, 0x61, 0x66, 0x0, 0x30, 0xa]}, &(0x7f0000000200)={0x0, "d800f67704f1a9e8ce038d8c9a75daf863ac5b565ac67e4e7c3f7a531f932c2e13d9debd481ecc5a9be4521fa54abd61ac0ee80f16b5a9c9ed4c6560995681f0", 0x23}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x1}, r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r2, 0x100000000) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x34]}, &(0x7f00000001c0)={0x0, "fc709c79de9fff85d0de32fc7f0d62fcc9df07ded8876596c5fbd87386766c30eea1632c2db06dcddc8384e24415fdc8066fdd6b92507cdfed9b42829ca9c928"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='keyring\x00', r3) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "fc709c79de9fff85d0de32fc7f0d62fcc9df07ded8876596c5fbd87386766c30eea1632c2db06dcddc8384e24415fdc8066fdd6b92507cdfed9b42829ca9c928"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='keyring\x00', r4) (async) request_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='.request_key_auth\x00', r4) (async) r5 = add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="2788aa68b406b735f44809776170a42bf963d8be010ca10a17385035b216b8180e2a93626c9a77c12ff720da3b8d1988f5", 0x31, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r5, 0x1) 00:46:30 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:30 executing program 4: r0 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffe) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x4, 0x37, 0x0, 0x64, 0x38, 0x32, 0x64, 0x62, 0x0, 0x61, 0x30, 0x61, 0x66, 0x0, 0x30, 0xa]}, &(0x7f0000000200)={0x0, "d800f67704f1a9e8ce038d8c9a75daf863ac5b565ac67e4e7c3f7a531f932c2e13d9debd481ecc5a9be4521fa54abd61ac0ee80f16b5a9c9ed4c6560995681f0", 0x23}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x1}, r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r2, 0x100000000) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x34]}, &(0x7f00000001c0)={0x0, "fc709c79de9fff85d0de32fc7f0d62fcc9df07ded8876596c5fbd87386766c30eea1632c2db06dcddc8384e24415fdc8066fdd6b92507cdfed9b42829ca9c928"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='keyring\x00', r3) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "fc709c79de9fff85d0de32fc7f0d62fcc9df07ded8876596c5fbd87386766c30eea1632c2db06dcddc8384e24415fdc8066fdd6b92507cdfed9b42829ca9c928"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='keyring\x00', r4) (async) request_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='.request_key_auth\x00', r4) (async) r5 = add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="2788aa68b406b735f44809776170a42bf963d8be010ca10a17385035b216b8180e2a93626c9a77c12ff720da3b8d1988f5", 0x31, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r5, 0x1) [ 415.991310][ T5768] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 416.052440][ T5756] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:31 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9fe, 0x3e8c, 0x6}) 00:46:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) [ 416.934816][ T5793] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:32 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200002b2, 0x0) 00:46:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) 00:46:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9fe, 0x3e8c, 0x6}) 00:46:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9fe, 0x3e8c, 0x6}) 00:46:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 417.832478][ T5824] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:33 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200002b2, 0x0) 00:46:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9fe, 0x3e8c, 0x6}) 00:46:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 418.563491][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 418.563507][ T27] audit: type=1804 audit(1663202793.251:653): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005448913/syzkaller.YRi1cQ/106/bus" dev="sda1" ino=1179 res=1 errno=0 00:46:33 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200002b2, 0x0) 00:46:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 418.724866][ T27] audit: type=1800 audit(1663202793.251:654): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 418.795705][ T5853] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 418.853376][ T27] audit: type=1804 audit(1663202793.281:655): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/106/bus" dev="sda1" ino=1177 res=1 errno=0 [ 418.902748][ T5863] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 418.950361][ T27] audit: type=1800 audit(1663202793.281:656): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 418.981360][ T27] audit: type=1804 audit(1663202793.411:657): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/107/bus" dev="sda1" ino=1170 res=1 errno=0 [ 419.037724][ T27] audit: type=1800 audit(1663202793.411:658): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1170 res=0 errno=0 [ 419.060390][ T27] audit: type=1804 audit(1663202793.541:659): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/108/bus" dev="sda1" ino=1177 res=1 errno=0 [ 419.087607][ T27] audit: type=1800 audit(1663202793.541:660): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 00:46:34 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200002b2, 0x0) 00:46:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) syz_genetlink_get_family_id$mptcp(0xffffffffffffffff, r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './bus', [{0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '[**[$)]-%)'}, {0x20, '/dev/dri/card#\x00'}], 0xa, "6408ce8f4b623d49f6abbf87811b084aa0a1bd4c568b1a6f599151a810270c8bfd27ea586d324a300d6a9e4a72134fda52208c52a71d32ccfa810cf65f7e8ec8260fe30d66ae31c346c762cae6b585c9b55f337388e8e9afe257657e0440061f8cab58737ca38f79ef234b53520d0591c0313f549f59c0baa13c259b6dacce0aa36bcd7cf2ddafca3662df6f3f98141012bf9b8f029e3f55d33511751955c0bcf4d03121331c4ccc7fc45435879ad0cd02935d7539c1f8e000cea8626b3ac0711f6f46ccc2f4e81c7fb7e24e9f68e8f1561a82859f70bee80538a4220bb1f3bd4731d730d723d3acac644be65e2b1d667a2b"}, 0x136) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) 00:46:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 419.454834][ T27] audit: type=1804 audit(1663202794.141:661): pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005448913/syzkaller.YRi1cQ/107/bus" dev="sda1" ino=1177 res=1 errno=0 00:46:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 419.544108][ T27] audit: type=1800 audit(1663202794.141:662): pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1177 res=0 errno=0 00:46:34 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200002b2, 0x0) 00:46:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 419.754523][ T5884] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 419.953543][ T5896] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 00:46:35 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)) (async) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(0xffffffffffffffff, r2) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './bus', [{0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '[**[$)]-%)'}, {0x20, '/dev/dri/card#\x00'}], 0xa, "6408ce8f4b623d49f6abbf87811b084aa0a1bd4c568b1a6f599151a810270c8bfd27ea586d324a300d6a9e4a72134fda52208c52a71d32ccfa810cf65f7e8ec8260fe30d66ae31c346c762cae6b585c9b55f337388e8e9afe257657e0440061f8cab58737ca38f79ef234b53520d0591c0313f549f59c0baa13c259b6dacce0aa36bcd7cf2ddafca3662df6f3f98141012bf9b8f029e3f55d33511751955c0bcf4d03121331c4ccc7fc45435879ad0cd02935d7539c1f8e000cea8626b3ac0711f6f46ccc2f4e81c7fb7e24e9f68e8f1561a82859f70bee80538a4220bb1f3bd4731d730d723d3acac644be65e2b1d667a2b"}, 0x136) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) 00:46:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:35 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200002b2, 0x0) 00:46:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 420.642811][ T5918] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 420.812959][ T5930] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 00:46:36 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) syz_genetlink_get_family_id$mptcp(0xffffffffffffffff, r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './bus', [{0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '[**[$)]-%)'}, {0x20, '/dev/dri/card#\x00'}], 0xa, "6408ce8f4b623d49f6abbf87811b084aa0a1bd4c568b1a6f599151a810270c8bfd27ea586d324a300d6a9e4a72134fda52208c52a71d32ccfa810cf65f7e8ec8260fe30d66ae31c346c762cae6b585c9b55f337388e8e9afe257657e0440061f8cab58737ca38f79ef234b53520d0591c0313f549f59c0baa13c259b6dacce0aa36bcd7cf2ddafca3662df6f3f98141012bf9b8f029e3f55d33511751955c0bcf4d03121331c4ccc7fc45435879ad0cd02935d7539c1f8e000cea8626b3ac0711f6f46ccc2f4e81c7fb7e24e9f68e8f1561a82859f70bee80538a4220bb1f3bd4731d730d723d3acac644be65e2b1d667a2b"}, 0x136) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) ftruncate(r1, 0x800) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)) (async) lseek(r1, 0x200, 0x0) (async) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) (async) sendfile(r1, r2, 0x0, 0x10000) (async) syz_genetlink_get_family_id$mptcp(0xffffffffffffffff, r2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x1}) (async) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './bus', [{0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '[**[$)]-%)'}, {0x20, '/dev/dri/card#\x00'}], 0xa, "6408ce8f4b623d49f6abbf87811b084aa0a1bd4c568b1a6f599151a810270c8bfd27ea586d324a300d6a9e4a72134fda52208c52a71d32ccfa810cf65f7e8ec8260fe30d66ae31c346c762cae6b585c9b55f337388e8e9afe257657e0440061f8cab58737ca38f79ef234b53520d0591c0313f549f59c0baa13c259b6dacce0aa36bcd7cf2ddafca3662df6f3f98141012bf9b8f029e3f55d33511751955c0bcf4d03121331c4ccc7fc45435879ad0cd02935d7539c1f8e000cea8626b3ac0711f6f46ccc2f4e81c7fb7e24e9f68e8f1561a82859f70bee80538a4220bb1f3bd4731d730d723d3acac644be65e2b1d667a2b"}, 0x136) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r3}) (async) 00:46:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:36 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$setpipe(r0, 0x407, 0x3a6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000080)=""/117, 0x75}], 0x2, 0x3, 0x10000) 00:46:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 421.566541][ T5960] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:36 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r2 = creat(0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:36 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) (async) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$setpipe(r0, 0x407, 0x3a6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async, rerun: 32) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000080)=""/117, 0x75}], 0x2, 0x3, 0x10000) (rerun: 32) 00:46:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:37 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$setpipe(r0, 0x407, 0x3a6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000080)=""/117, 0x75}], 0x2, 0x3, 0x10000) syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) fcntl$setpipe(r0, 0x407, 0x3a6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000080)=""/117, 0x75}], 0x2, 0x3, 0x10000) (async) 00:46:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 422.546506][ T6000] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:37 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101003) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x40, 0x90f7, 0x73}) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="4151e3f1b82d3b6ae404ffdf94d19457239ca13ad18d7052d3209373f9f838459317eca684aa13f12ea75ce4caf48744bad5ab5b49c9ddad1eff370172bcfc34ba866c35d537fd41f65379c392469749de65a11bec8631a91daf5e74ce88996ac8990bb6a41b2e6b32901846fe392fd1d56409c05fc84c24891b4ab8dfc75c0a9203902f08a7941e2016d7f5bfc168fda28017bc720fd5eccfcd1ebab0ea1e84639db5e839754c1251c6cdc4", 0xac, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000200)={r3, 0xba, &(0x7f0000000140)=""/186}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 423.554353][ T6044] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:38 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101003) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x40, 0x90f7, 0x73}) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="4151e3f1b82d3b6ae404ffdf94d19457239ca13ad18d7052d3209373f9f838459317eca684aa13f12ea75ce4caf48744bad5ab5b49c9ddad1eff370172bcfc34ba866c35d537fd41f65379c392469749de65a11bec8631a91daf5e74ce88996ac8990bb6a41b2e6b32901846fe392fd1d56409c05fc84c24891b4ab8dfc75c0a9203902f08a7941e2016d7f5bfc168fda28017bc720fd5eccfcd1ebab0ea1e84639db5e839754c1251c6cdc4", 0xac, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000200)={r3, 0xba, &(0x7f0000000140)=""/186}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101003) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x40, 0x90f7, 0x73}) (async) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="4151e3f1b82d3b6ae404ffdf94d19457239ca13ad18d7052d3209373f9f838459317eca684aa13f12ea75ce4caf48744bad5ab5b49c9ddad1eff370172bcfc34ba866c35d537fd41f65379c392469749de65a11bec8631a91daf5e74ce88996ac8990bb6a41b2e6b32901846fe392fd1d56409c05fc84c24891b4ab8dfc75c0a9203902f08a7941e2016d7f5bfc168fda28017bc720fd5eccfcd1ebab0ea1e84639db5e839754c1251c6cdc4", 0xac}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000200)={r3, 0xba, &(0x7f0000000140)=""/186}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) [ 424.267851][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 424.267866][ T27] audit: type=1804 audit(1663202798.951:698): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005448913/syzkaller.YRi1cQ/114/bus" dev="sda1" ino=1177 res=1 errno=0 00:46:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101003) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x40, 0x90f7, 0x73}) (async) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="4151e3f1b82d3b6ae404ffdf94d19457239ca13ad18d7052d3209373f9f838459317eca684aa13f12ea75ce4caf48744bad5ab5b49c9ddad1eff370172bcfc34ba866c35d537fd41f65379c392469749de65a11bec8631a91daf5e74ce88996ac8990bb6a41b2e6b32901846fe392fd1d56409c05fc84c24891b4ab8dfc75c0a9203902f08a7941e2016d7f5bfc168fda28017bc720fd5eccfcd1ebab0ea1e84639db5e839754c1251c6cdc4", 0xac, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000200)={r3, 0xba, &(0x7f0000000140)=""/186}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 424.431606][ T27] audit: type=1800 audit(1663202798.951:699): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1177 res=0 errno=0 00:46:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x0, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 424.536017][ T27] audit: type=1804 audit(1663202799.031:700): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/121/bus" dev="sda1" ino=1179 res=1 errno=0 [ 424.664366][ T27] audit: type=1800 audit(1663202799.031:701): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 424.702438][ T27] audit: type=1804 audit(1663202799.171:702): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/122/bus" dev="sda1" ino=1159 res=1 errno=0 [ 424.733218][ T6087] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 424.746728][ T27] audit: type=1800 audit(1663202799.171:703): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 424.771230][ T27] audit: type=1804 audit(1663202799.321:704): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir626614469/syzkaller.nlOdGu/123/bus" dev="sda1" ino=1165 res=1 errno=0 [ 424.801282][ T27] audit: type=1800 audit(1663202799.321:705): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1165 res=0 errno=0 00:46:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x20000000, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:39 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 425.265585][ T27] audit: type=1804 audit(1663202799.951:706): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005448913/syzkaller.YRi1cQ/116/bus" dev="sda1" ino=1177 res=1 errno=0 00:46:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:40 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) [ 425.390480][ T27] audit: type=1800 audit(1663202799.951:707): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1177 res=0 errno=0 00:46:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) [ 425.567881][ T6116] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x20000000, 0x0) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) (async, rerun: 64) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 425.825442][ T6125] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 00:46:40 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 426.427804][ T6149] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x20000000, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) 00:46:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r2 = creat(0x0, 0x0) ftruncate(r2, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:41 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0xffff, 0xd52}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x800) 00:46:41 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) 00:46:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x10, r0, 0x100000000) 00:46:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) [ 427.488095][ T6191] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x24080, 0x0) [ 427.586858][ T6196] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 00:46:42 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x24080, 0x0) 00:46:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(0x0, 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) 00:46:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) (rerun: 64) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0xffff, 0xd52}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x800) 00:46:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) 00:46:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) 00:46:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) 00:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(0x0, 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0xffff, 0xd52}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x800) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) (async) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0xffff, 0xd52}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x800) (async) [ 428.364886][ T6223] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) 00:46:43 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=[0x1, 0x1, 0x2, 0xff], &(0x7f0000000080)=[0x7, 0xfff8, 0xfff, 0x9], &(0x7f00000000c0)=[0x7ff, 0x9, 0x1, 0x8, 0x2, 0x0, 0x5, 0x9, 0x5, 0xbf]}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x80500, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001580)={0x6, &(0x7f00000014c0)=[{0x101, 0x56, &(0x7f0000000180)="76d73c0f79bd70aeaff0538b55b90ffc3e4ab34ea79ebdc07ea5851411651d53e307e0b7d0ec686f628fd3254233e4b634177b8022af72efece5504553d8f1bdc93173010844d0e962a6148a0bd538a77a7452390895", 0x1, 0x1}, {0x4, 0xa1, &(0x7f0000000200)="17b534153d9ef65105b0b2826766a3d73a081dc29a51fe725c7c91cbd25cc4ddaebdca6896d71d85c4df37c556f1357393bacb9dc96651476afa196350fa9d570c32803775ad2e9f35828a1fd1084fe73af6b14852543d34d69271cd588e1ce79c61bf6fe395598fbf060ea55807860c3dc0226de2ded5fbdf4892693bde8de484003923a01e2525bdf76789de5957422f881cf9ef4dac1ff64104d0a4f4a0bc12", 0x1, 0x1}, {0xb21, 0xbd, &(0x7f00000002c0)="ce6ff9e32f9f91892acd51eee9011a19374b7a46a6ac623319267a282d118d90361d68d2ba1388364759c4a534b69cf4c82e73c0854cea36114ad28db2ba076ccfb86e712ddc757ca9caf408ab22fab0b406ddaec93f75b3e996510513d57c9f98a523b956f3914b77ed5014566b308f91a3e335ac298f9afb33240c6766a9ac9413f4f9c2e0be6d5e0642ce6ca25a117e02407fe5673cf6ddb058c98855a567db1b78b84672caac8c9d26f2a10cd1d24fb0f922ba1d3a2406c408389c", 0x1, 0xce105468c7599a5d}, {0x100, 0x4f, &(0x7f0000000380)="130b42065019fe0068ecbf446ec408328f2efd61d4f69e484dde79cd08592f309ec6c0ab214c506454c2c07cad6769024f57ab0548bb5e86607ac48b479dfd325cc69b0553bb1f7c89013c2ab25fa4", 0x1}, {0x6524, 0x96, &(0x7f0000000400)="7ef810f96d96c5e49ce1c1bdb8619d6558542c7eecc853a2610d4e5a4b4a2268b65d2344c42b3cd8b3c65d189ba669e27955391aee14e69358bac94d21f27b44de2e6cca66ed3aaac663f26e73c4c95a1c74e2e8360d9ee659cb6e352c5037500c53a99dffcffb8738e2b13f4a64da151dda85ab8b93597a7f3ad8b5f9e13e8abba47a11c9bef6254c14f241fd2da92a946da0af6b7e", 0x1, 0x1}, {0x7, 0x1000, &(0x7f00000004c0)="d42e299a727a2bbbd70adea80c6da16069fb814f103e0b1b14651066730f0296d4cad7fe4ad658406926500f13ff5f8127f6c58f190aca4f06630fc68f9ba24a1e8d6e1f1c92cdaa3af37e347ee429b7ffc51b6a78093f4329bbb7999986882106c019cb974e02d2482e488f6e46bd1963d7c9b441d6617acb5c2eff0edad7fb15b88720115860429e5edf362656077363bcc50280184b029cc1821ac4cf80c19b7619ad7f35f17b33800b7afc973e84797571f11f2798a22a60be224be7a36d82f8d4f7a39efce8e757a420c4c21bcadc44773103d6baeb6d5e8aca23b83475cb090c64168bdec8ce5ddd2360c83368bd50419c3a650798695d39bc3750d65b940dd1aa3a1b6ff04c9106ca1c1a1e74cf939b87a0b549985d321c5dab4ded87c7a6f15f0068089471bacdec81ebc748089e77649c71c8fa4d3bf89fc00c21199e611bcc54214367b9a7f25c5bf8abf03cf2a9f71665d71dbd4636858497e22a1fec855fd93c1172d357b8186d9024d06fe53ae7d4f17d32710feff3b1ba97216e25984562a84064c922083447c9395d5c907c1267af56939e65fae58ae27684fd64f9f0b4dfbc077f12baea7cc1184974dd300e580f4e98a6c9ff048bf604d4495d1252b3dddffa3f90b9134fc9d46cc1255ae145feea460a500e014308864607b4f83e8e1c7160544fd7e0043ea7485b5e61c72d64add144133c0c8f2b2e20a36716a48fa8d8cb61c37aad9e2086e4f97b679d196f48bf289c9d5a73b91aed6f56cc7d39e0ffae72734ff7e257d880e042252c38b562ead3fc75726692b4863f2dea8c57dd6ff6a478d066406f77a0504e68122fdd062ac1efb017800de6801e658c1b724221ae279cef42f226f74c25a13b959ee55826d8e4bd2b286f27f89b47e384bd2c32e758c11f02f2103bbe1734b5b1502cf747c7d8e898cfe91457eacaaf99a5355990861d9978c9b39a754918cf71faf423e5c237ab547004e31e098da8c75c5ae297c6ee586d4a481067ac131254291557ab576e8fc7ed26c5ea2448456b3aa64089a5ea8735584a7ce902cdb67957da1e0e22d6699caf840042bf750ce1fc1fdfe051508d39a3cdb0a796145936cc274a032c20e6c595428d09dccd730a3b16573017ccbd611c8e84f632e788cf54f3cb6c0cfd3d73af16cca489eda63cb8177e3047b01fd63a99fa71d681ca24f15e76d854dd3407b616ca0cae21f9a22d9fcd53bbc7b9cc319f81b613baed2dd0bcda7fe044f99a90e0adbef217003cfea779cae1a5d03e17efb82f9713ab80f686277f225161df0e1429da20330109d29393b1eeba3543907bda514993c2c6ff7c5217d7bca31e10acddb961ce78a9ae0c67f73d7b4f18e494d5530443757cb8d98c54a6b5e10927e1697e8c455974fc697920cd5fa2d6902684217aa15bad1b9039dfee9fcf1117cece794efcbe6b5913e19e20dcc0e65ec8ce741fef8364f14ab785aa5054192fa7a2fa05a9660c13ab218993e533368e69ae4f2e37afb909255d628026ce006aa3d48caa2b2517ebc5541fbce4dd41b1565f2803ebb4d3a065e8c24483bdaf0269ba9dd9ec2659cdca2ad79bce8ad3273dfac48715be1312765ef6f058222d864b8cf10ce038270dd06a4cf2303bdbf269608e00184339f260914cc6561736d1cb75f75d829f025e657ccbf7f2b7a14f85b47a29884531e6d9bd54a19ed1b65177fbf9b6d6af3508202b7ab3c6ff964407f9035b9d63178e06333fdbfba778880b8d719ae8c832a9eac1e416c6b8d41a63a081b342f6a9a1f4b041f9b6f872c0a57e6eec2a3b01e27421bffc871799c4b14417921e6db9607cf9a4d5cb3031eb42e7d801c8b7dfbed4e17e7402bd9f613f0f4f0d17fd90216b5678f822ac215d5354d29873a3ea5f49ae024d075b264ae78dd75a61a47cf20ad476f626818dc6b2991f9d0fcdb1f37f463912d2bc607cb21050b23223f28017cd56f782942015b546d791fa20fa296aa676c2adba3ebb0b42bfd895af8c1ad93d774a30a3ebf2bf0dea7ca754fc507091d8fde52d52d0cc3d4c7928a79161d43dd0a82cfa6eb71a92629b222b73d0b42c791c5a6a0355d32d0fb4a40380f1e29f0cbeac618f76f2c6eb1a5cda62be08d014e5ac3abe67413b24854568bfb8d06ae43677a6c6e8433ec0b4b44bc93c34a69ffb2ef988ed9bf6c802aef03a7e348cf97c9fa62745a26ba6e60bc71bc5c774371f25e415c6c195eb1c774470b94a288834560ce581cbbe9b94668cf9fa9b8c24d89af83d48e175ce74f421be7a99289da11d1873f51961dbd319cdfd90d3a8f453b70cdf559426b90f2073befbab05f08a67ebec081fac16f9193e379ea2a1603b2ab8228ac405740e41b4291f86cc269c91ad25e29098ecebfead9b526ef8fa5b2772554252e710d6317af5613832d55cba952fbb8a6a16389f81745b8babd99e33ff22abb1de19775a353de92faa1dd23e88f04fe2c43aefeccb11505c2f923dfa8854f8d780c7045e95ccc24f55966afce30b8add3899a72548c724359b62d7ed18f54c9cbd6749fae532a3fa89473dcde44bffe894ad9eb1e3f85baaae3fbf7b35ea2f3ea5c6444a235622f8064f32c69d6c2153332fd3e5a9ed5b7b2f3e4eec2a2649214d72de8b102deeaadc85dad00db9e2c65061f8aff503339c592525b9b6dd253930f4fa41d22d7a8a777dc083e8f8213c6d2881c7003292dd2a79f347074d2c176fb92df6a960a2f51b9982e84c1576de969de8b12b1372ce891a2ef8b7f80d6f68f24e8f7a9fa626e5ef20ddb43907dc71841fa3e26e75a87245a7191b12e1ccdb1c495c91028b28e2a35b335415d8f288701497545ea790a56dca8d7d44fb91a19dd09f79e6ea8ed379c3e1e57b1305c2fc6e595ae53c5328527c984eb3d7c72ab2c24eb6aa9b6205448ed15bcf0fdeff5989756db5e7d074a5a2a8d0391e2df74851a231d5dbfbb76dec210aabdcf52ac0231eace15ef20cebfc6c8505ad5d78b8753ca462bec55f65b5f4b3126a88e2022629544c62944ad7b4d459fa55d98e520fe8ea7438bf95d5c4cbe1fc8091e01700c25d97f4eec197a3a499aeb9b627899fc637ba7dba665ed0002d8818ebb30320baf0a3fc2e19f3347b2594f6ebac0b910a6fa6ac9b6b2a37476bac116e4b3b0c1b8d0b734e1b38a62dbc0ace2e9580a59362de1a7a99fcad930623318de2d535889330a52d881ece1355ded9dd6697b2c8c074e574b742fe77b25fd4937e8c9c7d3bcc54e3882fa1353728cdfb16982ee94ebc1e6f28850d11c70a3e41de625143c21236473ba4778ef40781eef876b4bfb257e591ed46e32a98201be267e7351db482320a8ef467757503825dbd2f1eb8ea6e31b38977e8df770fe3e6f71fdebd03c89859283753ceeaffaf27ef2cfc0c5cf847ebdb87a5991f59e3e9862d04f3e1451ee7ff5550fab5103b2658246123187f90fb3ef35e4011bb02ece6fb6e49b49336adf9b44bfa2677aa655d918f30e7de4ed8b4f4c44135085a464ca5bb870da34205c090e4ed2491e64162457ddf480795eaccdbbc8f26de463b561747a6c6f4bb44f48d44b4e0323ba04710ccdee83525c0c60b061a29ccbd707b4f48dddc33436e8ee53bb66fbfcf3d86cc1c161ce1f23ad2a90c556e3f043e80353c1057c36590b5d09e2923a8d6195e27bee3464d3a18ea97d7cba3ccf90a5f0d0e091e5ae78affb7d3616e94b2bd803786af039e11058451d54df0890844592b88799e27c25a06060f37924fd70d98b96d94679e2b9d9eb608af9efadeaf8179a169c243c8bc907d2f75d23d86db32d8cf36c9bc41d554eb765ba5910666e67b420d0477729ce63a60e346bf187aa55b3712ab72589513afa9fe0d91ff8d6884bbe37d497398b069c81d3c8ae1e9995c8ea5fb4662d7db855bc5eaa522c6596308da763cf657826f80553ddf956ec4f5dd7f6143af22a3c48d713df81deea467cabd81e5643fb4fb862caf20b8697b0d59b88389cfaf99c52ca762812e1a7993e7a9228f300d7278d7c9603d6d9abf25c99eee723efe8d6363a44c5536b8ef93af5213eb7bc336b9ab2daa7daa60a111d5cf7d04cf9ecdfd2f86c04328304a1cb5c17b5882993526870c76be841edd8814d735bd97ebdf1318d641d191b670eafd2fa79de566421544fdb620e8d625353954c0a7d5b60274a8c896ee20edc268f584b9fbc7cfc9bc61ec5e28eec39505332d7c362bfc14cf1ad8f329a50f9a83193adb43cc81cc667d93fdbdb8eeba649018dcc5354e205502e876207367169e506feb1a2d622d2b7f11d526cb7aeaba86215a0737344be0b0911040cc7b6a323e911297f0a9d6eebfb4e9e85e7b803398b29cd0bd1833793dbb350967050f3694675bc68e8f3f7db3513848c29160f6722fb1b87afde92f08fda7a778c3b107cc8f92aab6338cd11843d788f67ec9bc71988738ac41ce3dd4d4fa67ed25b0eaeeb202c1725d8408b49f469080affc6633d1a36e925443417bf64b7afc045419986c9a9a4e4dbb7e3c3c7f17eaefdd2fcd437de1b6d0fd1ae1e8c9b02a47e3343e57aea732d46dd5d5165d48aba0254917f823ca014c209f0a5176676d48ee1d7ed2553e9031022306ac27cb363ec9081880d906e16a37d5151c8ddb6c3a685ccd525ba581c6cc4fcbd425fcfba63fe6d41a2c2cf0824da38725a3dc8cb1f62dc88b98cca31e6fabc4f65029ba72d6a144ea046b2d035880eccc45e876c6ff3b1715fc0f686e81fc967a4516f200629ddc90aebe9e69149b429ef65a0f1cf468d1e96ca710fd6d698445dd3c153cb88f872dd342cc5af81943563cf5779ae69379f37deb78603d556983f4b2d169320aa2723bd1700c23b1af162074aaf942e4105561d37b05cd1b0bdc33b915bc2a1eb887ded999dbb01f238991b6d0da838d81e12ff8a5ec8aa8488b667410cc59b903bc5b7d46ffd29d5c96598578f6bdda0b9351a5643672a7ac8010fa864bd003f4b48fed2970451afa487db981a629c638bf1ebf6d24807cd3cc3c76b29170a1b08ef9315b833a741862c345eabe0f356a8d16f4fcba3faf90e54e929f21b7295b44c1c3c8b8ee8984b81ff63955f6efdc1f2ed0ecfa6ad614ea89fed6312a8f53f3db315e88c484e40d9ab97e089eb20cc8abdb20cb9594ad18c4c1d5f9d67a892bf0a4db5bdd1dfa9585aab87f6ef72199c5c4eba348b7ce2c3e9b70f7cd7e4615c43b04abd97a119e8d5bb7e0a0c771fd39ca61b089d702e85fe3060befb413c10edcd06434d518b283ab7cc6c4f7ad4b31950c25adc862fa1287349996f5250819db3a742a5e7d42f25399c0b6486b057ecedbca08863ca226da35755cf0acae01e4f9a778ee9ef8fb0cffda64696f8f4ede3ae5ee82567a5f68a95ed6f609b5a1d5906b3e61659d7c66be95c6aff95f362b06c959108b75aa6fe61007272e8d5817401c594a01064cbbdb8e3f35fcb18252f5cbdbf436ac835635025d0e70b6260f3a24cf80f2a1c6f5383f8df8e2af985cf72ad890590a0a9560beef73cd38f59b5e6d6f1cb950f45073cb279e0522f794c34a07a2144bbe401c8f21b3e12505f2c8442335831315b5616f33e49442242caa86a770f457b57f5c197d7d5720bbd733764ccc75f9436efffa74c09e80681ed93dcdb91bf6ef98e735564b25808dfeef053ff11e9fef89221b2d0fe9a3f4923c77c994e271f5c3bdcbcb59bba6d7eedaff7cb79d5c16d1d378596c460e827de9c7c383cad1b110c92af81df04e69e8b9eb04120ce83030432ceb57", 0x1}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) 00:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(0x0, 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x0) 00:46:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 429.041642][ T6251] QAT: Invalid ioctl -2146408672 00:46:43 executing program 3: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x7f}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=[0x1, 0x1, 0x2, 0xff], &(0x7f0000000080)=[0x7, 0xfff8, 0xfff, 0x9], &(0x7f00000000c0)=[0x7ff, 0x9, 0x1, 0x8, 0x2, 0x0, 0x5, 0x9, 0x5, 0xbf]}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x80500, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001580)={0x6, &(0x7f00000014c0)=[{0x101, 0x56, &(0x7f0000000180)="76d73c0f79bd70aeaff0538b55b90ffc3e4ab34ea79ebdc07ea5851411651d53e307e0b7d0ec686f628fd3254233e4b634177b8022af72efece5504553d8f1bdc93173010844d0e962a6148a0bd538a77a7452390895", 0x1, 0x1}, {0x4, 0xa1, &(0x7f0000000200)="17b534153d9ef65105b0b2826766a3d73a081dc29a51fe725c7c91cbd25cc4ddaebdca6896d71d85c4df37c556f1357393bacb9dc96651476afa196350fa9d570c32803775ad2e9f35828a1fd1084fe73af6b14852543d34d69271cd588e1ce79c61bf6fe395598fbf060ea55807860c3dc0226de2ded5fbdf4892693bde8de484003923a01e2525bdf76789de5957422f881cf9ef4dac1ff64104d0a4f4a0bc12", 0x1, 0x1}, {0xb21, 0xbd, &(0x7f00000002c0)="ce6ff9e32f9f91892acd51eee9011a19374b7a46a6ac623319267a282d118d90361d68d2ba1388364759c4a534b69cf4c82e73c0854cea36114ad28db2ba076ccfb86e712ddc757ca9caf408ab22fab0b406ddaec93f75b3e996510513d57c9f98a523b956f3914b77ed5014566b308f91a3e335ac298f9afb33240c6766a9ac9413f4f9c2e0be6d5e0642ce6ca25a117e02407fe5673cf6ddb058c98855a567db1b78b84672caac8c9d26f2a10cd1d24fb0f922ba1d3a2406c408389c", 0x1, 0xce105468c7599a5d}, {0x100, 0x4f, &(0x7f0000000380)="130b42065019fe0068ecbf446ec408328f2efd61d4f69e484dde79cd08592f309ec6c0ab214c506454c2c07cad6769024f57ab0548bb5e86607ac48b479dfd325cc69b0553bb1f7c89013c2ab25fa4", 0x1}, {0x6524, 0x96, &(0x7f0000000400)="7ef810f96d96c5e49ce1c1bdb8619d6558542c7eecc853a2610d4e5a4b4a2268b65d2344c42b3cd8b3c65d189ba669e27955391aee14e69358bac94d21f27b44de2e6cca66ed3aaac663f26e73c4c95a1c74e2e8360d9ee659cb6e352c5037500c53a99dffcffb8738e2b13f4a64da151dda85ab8b93597a7f3ad8b5f9e13e8abba47a11c9bef6254c14f241fd2da92a946da0af6b7e", 0x1, 0x1}, {0x7, 0x1000, &(0x7f00000004c0)="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", 0x1}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r4, 0x200, 0x0) 00:46:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100400000) [ 429.209392][ T6266] QAT: Invalid ioctl -2146408672 [ 429.330411][ T6269] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 429.372284][ T6270] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:44 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) 00:46:44 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(r4, 0x200, 0x0) 00:46:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=[0x1, 0x1, 0x2, 0xff], &(0x7f0000000080)=[0x7, 0xfff8, 0xfff, 0x9], &(0x7f00000000c0)=[0x7ff, 0x9, 0x1, 0x8, 0x2, 0x0, 0x5, 0x9, 0x5, 0xbf]}) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x80500, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001580)={0x6, &(0x7f00000014c0)=[{0x101, 0x56, &(0x7f0000000180)="76d73c0f79bd70aeaff0538b55b90ffc3e4ab34ea79ebdc07ea5851411651d53e307e0b7d0ec686f628fd3254233e4b634177b8022af72efece5504553d8f1bdc93173010844d0e962a6148a0bd538a77a7452390895", 0x1, 0x1}, {0x4, 0xa1, &(0x7f0000000200)="17b534153d9ef65105b0b2826766a3d73a081dc29a51fe725c7c91cbd25cc4ddaebdca6896d71d85c4df37c556f1357393bacb9dc96651476afa196350fa9d570c32803775ad2e9f35828a1fd1084fe73af6b14852543d34d69271cd588e1ce79c61bf6fe395598fbf060ea55807860c3dc0226de2ded5fbdf4892693bde8de484003923a01e2525bdf76789de5957422f881cf9ef4dac1ff64104d0a4f4a0bc12", 0x1, 0x1}, {0xb21, 0xbd, &(0x7f00000002c0)="ce6ff9e32f9f91892acd51eee9011a19374b7a46a6ac623319267a282d118d90361d68d2ba1388364759c4a534b69cf4c82e73c0854cea36114ad28db2ba076ccfb86e712ddc757ca9caf408ab22fab0b406ddaec93f75b3e996510513d57c9f98a523b956f3914b77ed5014566b308f91a3e335ac298f9afb33240c6766a9ac9413f4f9c2e0be6d5e0642ce6ca25a117e02407fe5673cf6ddb058c98855a567db1b78b84672caac8c9d26f2a10cd1d24fb0f922ba1d3a2406c408389c", 0x1, 0xce105468c7599a5d}, {0x100, 0x4f, &(0x7f0000000380)="130b42065019fe0068ecbf446ec408328f2efd61d4f69e484dde79cd08592f309ec6c0ab214c506454c2c07cad6769024f57ab0548bb5e86607ac48b479dfd325cc69b0553bb1f7c89013c2ab25fa4", 0x1}, {0x6524, 0x96, &(0x7f0000000400)="7ef810f96d96c5e49ce1c1bdb8619d6558542c7eecc853a2610d4e5a4b4a2268b65d2344c42b3cd8b3c65d189ba669e27955391aee14e69358bac94d21f27b44de2e6cca66ed3aaac663f26e73c4c95a1c74e2e8360d9ee659cb6e352c5037500c53a99dffcffb8738e2b13f4a64da151dda85ab8b93597a7f3ad8b5f9e13e8abba47a11c9bef6254c14f241fd2da92a946da0af6b7e", 0x1, 0x1}, {0x7, 0x1000, &(0x7f00000004c0)="d42e299a727a2bbbd70adea80c6da16069fb814f103e0b1b14651066730f0296d4cad7fe4ad658406926500f13ff5f8127f6c58f190aca4f06630fc68f9ba24a1e8d6e1f1c92cdaa3af37e347ee429b7ffc51b6a78093f4329bbb7999986882106c019cb974e02d2482e488f6e46bd1963d7c9b441d6617acb5c2eff0edad7fb15b88720115860429e5edf362656077363bcc50280184b029cc1821ac4cf80c19b7619ad7f35f17b33800b7afc973e84797571f11f2798a22a60be224be7a36d82f8d4f7a39efce8e757a420c4c21bcadc44773103d6baeb6d5e8aca23b83475cb090c64168bdec8ce5ddd2360c83368bd50419c3a650798695d39bc3750d65b940dd1aa3a1b6ff04c9106ca1c1a1e74cf939b87a0b549985d321c5dab4ded87c7a6f15f0068089471bacdec81ebc748089e77649c71c8fa4d3bf89fc00c21199e611bcc54214367b9a7f25c5bf8abf03cf2a9f71665d71dbd4636858497e22a1fec855fd93c1172d357b8186d9024d06fe53ae7d4f17d32710feff3b1ba97216e25984562a84064c922083447c9395d5c907c1267af56939e65fae58ae27684fd64f9f0b4dfbc077f12baea7cc1184974dd300e580f4e98a6c9ff048bf604d4495d1252b3dddffa3f90b9134fc9d46cc1255ae145feea460a500e014308864607b4f83e8e1c7160544fd7e0043ea7485b5e61c72d64add144133c0c8f2b2e20a36716a48fa8d8cb61c37aad9e2086e4f97b679d196f48bf289c9d5a73b91aed6f56cc7d39e0ffae72734ff7e257d880e042252c38b562ead3fc75726692b4863f2dea8c57dd6ff6a478d066406f77a0504e68122fdd062ac1efb017800de6801e658c1b724221ae279cef42f226f74c25a13b959ee55826d8e4bd2b286f27f89b47e384bd2c32e758c11f02f2103bbe1734b5b1502cf747c7d8e898cfe91457eacaaf99a5355990861d9978c9b39a754918cf71faf423e5c237ab547004e31e098da8c75c5ae297c6ee586d4a481067ac131254291557ab576e8fc7ed26c5ea2448456b3aa64089a5ea8735584a7ce902cdb67957da1e0e22d6699caf840042bf750ce1fc1fdfe051508d39a3cdb0a796145936cc274a032c20e6c595428d09dccd730a3b16573017ccbd611c8e84f632e788cf54f3cb6c0cfd3d73af16cca489eda63cb8177e3047b01fd63a99fa71d681ca24f15e76d854dd3407b616ca0cae21f9a22d9fcd53bbc7b9cc319f81b613baed2dd0bcda7fe044f99a90e0adbef217003cfea779cae1a5d03e17efb82f9713ab80f686277f225161df0e1429da20330109d29393b1eeba3543907bda514993c2c6ff7c5217d7bca31e10acddb961ce78a9ae0c67f73d7b4f18e494d5530443757cb8d98c54a6b5e10927e1697e8c455974fc697920cd5fa2d6902684217aa15bad1b9039dfee9fcf1117cece794efcbe6b5913e19e20dcc0e65ec8ce741fef8364f14ab785aa5054192fa7a2fa05a9660c13ab218993e533368e69ae4f2e37afb909255d628026ce006aa3d48caa2b2517ebc5541fbce4dd41b1565f2803ebb4d3a065e8c24483bdaf0269ba9dd9ec2659cdca2ad79bce8ad3273dfac48715be1312765ef6f058222d864b8cf10ce038270dd06a4cf2303bdbf269608e00184339f260914cc6561736d1cb75f75d829f025e657ccbf7f2b7a14f85b47a29884531e6d9bd54a19ed1b65177fbf9b6d6af3508202b7ab3c6ff964407f9035b9d63178e06333fdbfba778880b8d719ae8c832a9eac1e416c6b8d41a63a081b342f6a9a1f4b041f9b6f872c0a57e6eec2a3b01e27421bffc871799c4b14417921e6db9607cf9a4d5cb3031eb42e7d801c8b7dfbed4e17e7402bd9f613f0f4f0d17fd90216b5678f822ac215d5354d29873a3ea5f49ae024d075b264ae78dd75a61a47cf20ad476f626818dc6b2991f9d0fcdb1f37f463912d2bc607cb21050b23223f28017cd56f782942015b546d791fa20fa296aa676c2adba3ebb0b42bfd895af8c1ad93d774a30a3ebf2bf0dea7ca754fc507091d8fde52d52d0cc3d4c7928a79161d43dd0a82cfa6eb71a92629b222b73d0b42c791c5a6a0355d32d0fb4a40380f1e29f0cbeac618f76f2c6eb1a5cda62be08d014e5ac3abe67413b24854568bfb8d06ae43677a6c6e8433ec0b4b44bc93c34a69ffb2ef988ed9bf6c802aef03a7e348cf97c9fa62745a26ba6e60bc71bc5c774371f25e415c6c195eb1c774470b94a288834560ce581cbbe9b94668cf9fa9b8c24d89af83d48e175ce74f421be7a99289da11d1873f51961dbd319cdfd90d3a8f453b70cdf559426b90f2073befbab05f08a67ebec081fac16f9193e379ea2a1603b2ab8228ac405740e41b4291f86cc269c91ad25e29098ecebfead9b526ef8fa5b2772554252e710d6317af5613832d55cba952fbb8a6a16389f81745b8babd99e33ff22abb1de19775a353de92faa1dd23e88f04fe2c43aefeccb11505c2f923dfa8854f8d780c7045e95ccc24f55966afce30b8add3899a72548c724359b62d7ed18f54c9cbd6749fae532a3fa89473dcde44bffe894ad9eb1e3f85baaae3fbf7b35ea2f3ea5c6444a235622f8064f32c69d6c2153332fd3e5a9ed5b7b2f3e4eec2a2649214d72de8b102deeaadc85dad00db9e2c65061f8aff503339c592525b9b6dd253930f4fa41d22d7a8a777dc083e8f8213c6d2881c7003292dd2a79f347074d2c176fb92df6a960a2f51b9982e84c1576de969de8b12b1372ce891a2ef8b7f80d6f68f24e8f7a9fa626e5ef20ddb43907dc71841fa3e26e75a87245a7191b12e1ccdb1c495c91028b28e2a35b335415d8f288701497545ea790a56dca8d7d44fb91a19dd09f79e6ea8ed379c3e1e57b1305c2fc6e595ae53c5328527c984eb3d7c72ab2c24eb6aa9b6205448ed15bcf0fdeff5989756db5e7d074a5a2a8d0391e2df74851a231d5dbfbb76dec210aabdcf52ac0231eace15ef20cebfc6c8505ad5d78b8753ca462bec55f65b5f4b3126a88e2022629544c62944ad7b4d459fa55d98e520fe8ea7438bf95d5c4cbe1fc8091e01700c25d97f4eec197a3a499aeb9b627899fc637ba7dba665ed0002d8818ebb30320baf0a3fc2e19f3347b2594f6ebac0b910a6fa6ac9b6b2a37476bac116e4b3b0c1b8d0b734e1b38a62dbc0ace2e9580a59362de1a7a99fcad930623318de2d535889330a52d881ece1355ded9dd6697b2c8c074e574b742fe77b25fd4937e8c9c7d3bcc54e3882fa1353728cdfb16982ee94ebc1e6f28850d11c70a3e41de625143c21236473ba4778ef40781eef876b4bfb257e591ed46e32a98201be267e7351db482320a8ef467757503825dbd2f1eb8ea6e31b38977e8df770fe3e6f71fdebd03c89859283753ceeaffaf27ef2cfc0c5cf847ebdb87a5991f59e3e9862d04f3e1451ee7ff5550fab5103b2658246123187f90fb3ef35e4011bb02ece6fb6e49b49336adf9b44bfa2677aa655d918f30e7de4ed8b4f4c44135085a464ca5bb870da34205c090e4ed2491e64162457ddf480795eaccdbbc8f26de463b561747a6c6f4bb44f48d44b4e0323ba04710ccdee83525c0c60b061a29ccbd707b4f48dddc33436e8ee53bb66fbfcf3d86cc1c161ce1f23ad2a90c556e3f043e80353c1057c36590b5d09e2923a8d6195e27bee3464d3a18ea97d7cba3ccf90a5f0d0e091e5ae78affb7d3616e94b2bd803786af039e11058451d54df0890844592b88799e27c25a06060f37924fd70d98b96d94679e2b9d9eb608af9efadeaf8179a169c243c8bc907d2f75d23d86db32d8cf36c9bc41d554eb765ba5910666e67b420d0477729ce63a60e346bf187aa55b3712ab72589513afa9fe0d91ff8d6884bbe37d497398b069c81d3c8ae1e9995c8ea5fb4662d7db855bc5eaa522c6596308da763cf657826f80553ddf956ec4f5dd7f6143af22a3c48d713df81deea467cabd81e5643fb4fb862caf20b8697b0d59b88389cfaf99c52ca762812e1a7993e7a9228f300d7278d7c9603d6d9abf25c99eee723efe8d6363a44c5536b8ef93af5213eb7bc336b9ab2daa7daa60a111d5cf7d04cf9ecdfd2f86c04328304a1cb5c17b5882993526870c76be841edd8814d735bd97ebdf1318d641d191b670eafd2fa79de566421544fdb620e8d625353954c0a7d5b60274a8c896ee20edc268f584b9fbc7cfc9bc61ec5e28eec39505332d7c362bfc14cf1ad8f329a50f9a83193adb43cc81cc667d93fdbdb8eeba649018dcc5354e205502e876207367169e506feb1a2d622d2b7f11d526cb7aeaba86215a0737344be0b0911040cc7b6a323e911297f0a9d6eebfb4e9e85e7b803398b29cd0bd1833793dbb350967050f3694675bc68e8f3f7db3513848c29160f6722fb1b87afde92f08fda7a778c3b107cc8f92aab6338cd11843d788f67ec9bc71988738ac41ce3dd4d4fa67ed25b0eaeeb202c1725d8408b49f469080affc6633d1a36e925443417bf64b7afc045419986c9a9a4e4dbb7e3c3c7f17eaefdd2fcd437de1b6d0fd1ae1e8c9b02a47e3343e57aea732d46dd5d5165d48aba0254917f823ca014c209f0a5176676d48ee1d7ed2553e9031022306ac27cb363ec9081880d906e16a37d5151c8ddb6c3a685ccd525ba581c6cc4fcbd425fcfba63fe6d41a2c2cf0824da38725a3dc8cb1f62dc88b98cca31e6fabc4f65029ba72d6a144ea046b2d035880eccc45e876c6ff3b1715fc0f686e81fc967a4516f200629ddc90aebe9e69149b429ef65a0f1cf468d1e96ca710fd6d698445dd3c153cb88f872dd342cc5af81943563cf5779ae69379f37deb78603d556983f4b2d169320aa2723bd1700c23b1af162074aaf942e4105561d37b05cd1b0bdc33b915bc2a1eb887ded999dbb01f238991b6d0da838d81e12ff8a5ec8aa8488b667410cc59b903bc5b7d46ffd29d5c96598578f6bdda0b9351a5643672a7ac8010fa864bd003f4b48fed2970451afa487db981a629c638bf1ebf6d24807cd3cc3c76b29170a1b08ef9315b833a741862c345eabe0f356a8d16f4fcba3faf90e54e929f21b7295b44c1c3c8b8ee8984b81ff63955f6efdc1f2ed0ecfa6ad614ea89fed6312a8f53f3db315e88c484e40d9ab97e089eb20cc8abdb20cb9594ad18c4c1d5f9d67a892bf0a4db5bdd1dfa9585aab87f6ef72199c5c4eba348b7ce2c3e9b70f7cd7e4615c43b04abd97a119e8d5bb7e0a0c771fd39ca61b089d702e85fe3060befb413c10edcd06434d518b283ab7cc6c4f7ad4b31950c25adc862fa1287349996f5250819db3a742a5e7d42f25399c0b6486b057ecedbca08863ca226da35755cf0acae01e4f9a778ee9ef8fb0cffda64696f8f4ede3ae5ee82567a5f68a95ed6f609b5a1d5906b3e61659d7c66be95c6aff95f362b06c959108b75aa6fe61007272e8d5817401c594a01064cbbdb8e3f35fcb18252f5cbdbf436ac835635025d0e70b6260f3a24cf80f2a1c6f5383f8df8e2af985cf72ad890590a0a9560beef73cd38f59b5e6d6f1cb950f45073cb279e0522f794c34a07a2144bbe401c8f21b3e12505f2c8442335831315b5616f33e49442242caa86a770f457b57f5c197d7d5720bbd733764ccc75f9436efffa74c09e80681ed93dcdb91bf6ef98e735564b25808dfeef053ff11e9fef89221b2d0fe9a3f4923c77c994e271f5c3bdcbcb59bba6d7eedaff7cb79d5c16d1d378596c460e827de9c7c383cad1b110c92af81df04e69e8b9eb04120ce83030432ceb57", 0x1}]}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) 00:46:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r4, 0x200, 0x0) 00:46:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(r4, 0x200, 0x0) [ 430.104763][ T6286] QAT: Invalid ioctl -2146408672 00:46:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0xffffc000) 00:46:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r4, 0x200, 0x0) 00:46:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0xffffc000) 00:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) [ 430.320784][ T6294] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 430.344871][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 430.344886][ T27] audit: type=1804 audit(1663202805.031:757): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir645514572/syzkaller.52FNmr/176/bus" dev="sda1" ino=1160 res=1 errno=0 [ 430.480351][ T27] audit: type=1800 audit(1663202805.061:758): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1160 res=0 errno=0 [ 430.494354][ T6302] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:45 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r4, 0x200, 0x0) 00:46:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0xffffc000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0xffffc000) (async) 00:46:45 executing program 3: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 00:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) 00:46:45 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x4, 0x1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x100010, r0, 0x100000000) 00:46:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) 00:46:45 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:45 executing program 1: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 431.264120][ T6323] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 431.277659][ T27] audit: type=1804 audit(1663202805.961:759): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005448913/syzkaller.YRi1cQ/128/bus" dev="sda1" ino=1181 res=1 errno=0 [ 431.385484][ T27] audit: type=1800 audit(1663202805.991:760): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1181 res=0 errno=0 00:46:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x0, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 431.437960][ T27] audit: type=1400 audit(1663202806.041:761): avc: denied { map } for pid=6325 comm="syz-executor.4" path="socket:[41073]" dev="sockfs" ino=41073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 431.497438][ T6337] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 431.555035][ T27] audit: type=1400 audit(1663202806.041:762): avc: denied { accept } for pid=6325 comm="syz-executor.4" path="socket:[41073]" dev="sockfs" ino=41073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 431.587312][ T6338] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 431.636214][ T6336] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 00:46:50 executing program 5: unshare(0x6c060000) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200002b2, 0x0) 00:46:50 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) (async) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x4, 0x1}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x100010, r0, 0x100000000) 00:46:50 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) 00:46:50 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000025900000000010001feb8f0ebee3090383f4ac0ea3cfb629838b23028d715f90000000092dc85ad7878c5000000002aa02521cb4a148cc992cc089b59000000000000000c0000008002fa2c045f48ed9b419c890a0000000000000000000000000b18c88dbabaeff5378bf6147fe35e7a5da3070000000000000093ae2af386556ff355f0127277aa5677a354405dabf2563e94f0fcd50c4c1cb52f705a2270318aa8584cedb1a9a12caeb98f1a52715098a1cc5b115d41b3f4266c969a7b7e5bff42b33055fa4d6a8283d93a23687f2e54ac214ae927af62b30a54bfc6cdcf88e34536f57e3036fbcfaa4b9f7299ace923296d1ce5ce91df3eab9eb669217d0f1ff6b5bb19a284710e6051e217af9e8e539de84fcfcaebaf0b166916bc1be5f7c0b0499dc945cfa629f63485d1444a531471d2d2e62d934959fb022f481fe9d1235e33c7ee69cd411e58bc2f219aa3cdc4cbf82d80fd28d5d366e7eb149a91688223c8d576110e620b22df4fdd92dee30b12fe8cedd5d883ad24736f5b"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:50 executing program 3: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, 0xffffffffffffffff, 0x100000000) [ 435.651254][ T27] audit: type=1804 audit(1663202810.331:763): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir643564599/syzkaller.Elmowz/152/bus" dev="sda1" ino=1180 res=1 errno=0 00:46:50 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) (async) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r1, r2, 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x4, 0x1}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x100010, r0, 0x100000000) 00:46:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) [ 435.763920][ T27] audit: type=1800 audit(1663202810.331:764): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1180 res=0 errno=0 [ 435.805510][ T6375] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 435.864430][ T27] audit: type=1804 audit(1663202810.551:765): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005448913/syzkaller.YRi1cQ/130/bus" dev="sda1" ino=1161 res=1 errno=0 [ 435.897765][ T6374] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 1) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 435.980010][ T27] audit: type=1800 audit(1663202810.551:766): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1161 res=0 errno=0 [ 436.033081][ T6376] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 00:46:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 1) 00:46:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x20, 0xffffff81, 0x2, 0x9, 0x5, 0x9}) 00:46:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 2) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 00:46:51 executing program 5: unshare(0x6c060000) unshare(0x18090680) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200002b2, 0x0) 00:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 1) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x24080, 0x0) 00:46:51 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x18040500) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) unshare(0x20000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x8020200) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) unshare(0x44000000) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:46:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x20, 0xffffff81, 0x2, 0x9, 0x5, 0x9}) 00:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 2) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x24080, 0x0) 00:46:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 3) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 00:46:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x20, 0xffffff81, 0x2, 0x9, 0x5, 0x9}) 00:46:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 2) 00:46:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 4) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 00:46:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 3) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x24080, 0x0) [ 437.508821][ T6413] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:46:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r2, r3, 0x0, 0x10000) r4 = syz_open_dev$midi(&(0x7f0000000140), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0xff, 0x5}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000080)=0x2b67c33e) 00:46:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd14, 0x3, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r0, 0x100000000) (fail_nth: 3) [ 437.633139][ T6423] ================================================================== [ 437.641253][ T6423] BUG: KASAN: use-after-free in drm_gem_object_release_handle+0xa1/0xb0 [ 437.649671][ T6423] Read of size 8 at addr ffff888020a321e8 by task syz-executor.2/6423 [ 437.656531][ T6417] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 437.657846][ T6423] [ 437.657853][ T6423] CPU: 0 PID: 6423 Comm: syz-executor.2 Not tainted 6.0.0-rc5-syzkaller-00025-g3245cb65fd91 #0 [ 437.678549][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 437.688618][ T6423] Call Trace: [ 437.691908][ T6423] [ 437.694851][ T6423] dump_stack_lvl+0xcd/0x134 [ 437.699460][ T6423] print_report.cold+0x2ba/0x6e9 [ 437.704461][ T6423] ? drm_gem_object_release_handle+0xa1/0xb0 [ 437.710462][ T6423] kasan_report+0xb1/0x1e0 [ 437.714890][ T6423] ? drm_gem_object_release_handle+0xa1/0xb0 [ 437.720870][ T6423] drm_gem_object_release_handle+0xa1/0xb0 [ 437.726706][ T6423] ? drm_gem_object_handle_put_unlocked+0x390/0x390 [ 437.733292][ T6423] idr_for_each+0x113/0x220 [ 437.737847][ T6423] ? idr_find+0x50/0x50 [ 437.742002][ T6423] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 437.747803][ T6423] drm_gem_release+0x22/0x30 [ 437.752388][ T6423] drm_file_free.part.0+0x805/0xb80 [ 437.757626][ T6423] ? fsnotify+0x1680/0x1680 [ 437.762211][ T6423] drm_close_helper.isra.0+0x17d/0x1f0 [ 437.767678][ T6423] drm_release+0x1e6/0x530 [ 437.772089][ T6423] __fput+0x277/0x9d0 [ 437.776082][ T6423] ? drm_release_noglobal+0x180/0x180 [ 437.781540][ T6423] task_work_run+0xdd/0x1a0 [ 437.786041][ T6423] exit_to_user_mode_prepare+0x23c/0x250 [ 437.791669][ T6423] syscall_exit_to_user_mode+0x19/0x50 [ 437.797123][ T6423] do_syscall_64+0x42/0xb0 [ 437.801537][ T6423] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 437.807425][ T6423] RIP: 0033:0x7efebce3c04b [ 437.811865][ T6423] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 437.831464][ T6423] RSP: 002b:00007ffc17634d20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 437.839868][ T6423] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007efebce3c04b [ 437.847833][ T6423] RDX: 00007efebcfa08d0 RSI: ffffffffffffffff RDI: 0000000000000003 [ 437.855795][ T6423] RBP: 00007efebcf9d980 R08: 0000000000000000 R09: 00007efebcfa08d8 [ 437.863777][ T6423] R10: 00007ffc17634e20 R11: 0000000000000293 R12: 000000000006ad61 [ 437.871753][ T6423] R13: 00007ffc17634e20 R14: 00007efebcf9bf80 R15: 0000000000000032 [ 437.879720][ T6423] [ 437.882745][ T6423] [ 437.885057][ T6423] Allocated by task 6425: [ 437.889384][ T6423] kasan_save_stack+0x1e/0x40 [ 437.894058][ T6423] __kasan_kmalloc+0xa6/0xd0 [ 437.898638][ T6423] kmem_cache_alloc_trace+0x25a/0x460 [ 437.904008][ T6423] vgem_gem_create_object+0x38/0xb0 [ 437.909254][ T6423] __drm_gem_shmem_create+0x80/0x480 [ 437.914569][ T6423] drm_gem_shmem_dumb_create+0x13c/0x380 [ 437.920194][ T6423] drm_mode_create_dumb+0x26c/0x2f0 [ 437.925412][ T6423] drm_ioctl_kernel+0x27d/0x4e0 [ 437.930254][ T6423] drm_ioctl+0x51e/0x9d0 [ 437.934490][ T6423] __x64_sys_ioctl+0x193/0x200 [ 437.939251][ T6423] do_syscall_64+0x35/0xb0 [ 437.943663][ T6423] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 437.949549][ T6423] [ 437.951860][ T6423] Freed by task 6425: [ 437.955826][ T6423] kasan_save_stack+0x1e/0x40 [ 437.960516][ T6423] kasan_set_track+0x21/0x30 [ 437.965096][ T6423] kasan_set_free_info+0x20/0x30 [ 437.970024][ T6423] ____kasan_slab_free+0x13d/0x1a0 [ 437.975133][ T6423] kfree+0x173/0x390 [ 437.979026][ T6423] drm_gem_mmap+0x4fc/0x770 [ 437.983523][ T6423] mmap_region+0xbff/0x1460 [ 437.988023][ T6423] do_mmap+0x863/0xfa0 [ 437.992084][ T6423] vm_mmap_pgoff+0x1ab/0x270 [ 437.996688][ T6423] ksys_mmap_pgoff+0x41b/0x5a0 [ 438.001455][ T6423] do_syscall_64+0x35/0xb0 [ 438.005865][ T6423] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 438.011750][ T6423] [ 438.014063][ T6423] The buggy address belongs to the object at ffff888020a32000 [ 438.014063][ T6423] which belongs to the cache kmalloc-1k of size 1024 [ 438.028114][ T6423] The buggy address is located 488 bytes inside of [ 438.028114][ T6423] 1024-byte region [ffff888020a32000, ffff888020a32400) [ 438.041464][ T6423] [ 438.043779][ T6423] The buggy address belongs to the physical page: [ 438.050175][ T6423] page:ffffea0000828c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20a32 [ 438.060315][ T6423] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 438.067856][ T6423] raw: 00fff00000000200 ffffea00005b6b88 ffffea0000930a48 ffff888011840700 [ 438.076431][ T6423] raw: 0000000000000000 ffff888020a32000 0000000100000002 0000000000000000 [ 438.085011][ T6423] page dumped because: kasan: bad access detected [ 438.091410][ T6423] page_owner tracks the page as allocated [ 438.097196][ T6423] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2c20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_THISNODE), pid 3604, tgid 3604 (syz-fuzzer), ts 118435809223, free_ts 116136445358 [ 438.118733][ T6423] get_page_from_freelist+0x109b/0x2ce0 [ 438.124287][ T6423] __alloc_pages+0x1c7/0x510 [ 438.128880][ T6423] cache_grow_begin+0x75/0x360 [ 438.133650][ T6423] cache_alloc_refill+0x27f/0x380 [ 438.138675][ T6423] kmem_cache_alloc_node_trace+0x50a/0x570 [ 438.144479][ T6423] __kmalloc_node_track_caller+0x38/0x60 [ 438.150109][ T6423] __alloc_skb+0xd9/0x2f0 [ 438.154460][ T6423] tcp_stream_alloc_skb+0x38/0x580 [ 438.159584][ T6423] tcp_sendmsg_locked+0xc36/0x2f80 [ 438.164687][ T6423] tcp_sendmsg+0x2b/0x40 [ 438.168925][ T6423] inet_sendmsg+0x99/0xe0 [ 438.173263][ T6423] sock_sendmsg+0xcf/0x120 [ 438.177720][ T6423] sock_write_iter+0x291/0x3d0 [ 438.182481][ T6423] vfs_write+0x9e9/0xdd0 [ 438.186731][ T6423] ksys_write+0x1e8/0x250 [ 438.191067][ T6423] do_syscall_64+0x35/0xb0 [ 438.195476][ T6423] page last free stack trace: [ 438.200136][ T6423] free_pcp_prepare+0x5e4/0xd20 [ 438.204981][ T6423] free_unref_page+0x19/0x4d0 [ 438.209665][ T6423] slabs_destroy+0x89/0xc0 [ 438.214090][ T6423] ___cache_free+0x2a8/0x3d0 [ 438.218675][ T6423] qlist_free_all+0x4f/0x1b0 [ 438.223272][ T6423] kasan_quarantine_reduce+0x180/0x200 [ 438.228724][ T6423] __kasan_slab_alloc+0x97/0xb0 [ 438.233570][ T6423] kmem_cache_alloc_node+0x2f1/0x560 [ 438.238849][ T6423] __alloc_skb+0x210/0x2f0 [ 438.243280][ T6423] tcp_stream_alloc_skb+0x38/0x580 [ 438.248420][ T6423] tcp_sendmsg_locked+0xc36/0x2f80 [ 438.253546][ T6423] tcp_sendmsg+0x2b/0x40 [ 438.257793][ T6423] inet_sendmsg+0x99/0xe0 [ 438.262129][ T6423] sock_sendmsg+0xcf/0x120 [ 438.266552][ T6423] sock_write_iter+0x291/0x3d0 [ 438.271314][ T6423] vfs_write+0x9e9/0xdd0 [ 438.275558][ T6423] [ 438.277872][ T6423] Memory state around the buggy address: [ 438.283488][ T6423] ffff888020a32080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.291540][ T6423] ffff888020a32100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.299594][ T6423] >ffff888020a32180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.307641][ T6423] ^ [ 438.315078][ T6423] ffff888020a32200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.323130][ T6423] ffff888020a32280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.331176][ T6423] ================================================================== [ 438.352520][ T6423] Kernel panic - not syncing: panic_on_warn set ... [ 438.359143][ T6423] CPU: 1 PID: 6423 Comm: syz-executor.2 Not tainted 6.0.0-rc5-syzkaller-00025-g3245cb65fd91 #0 [ 438.369481][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 438.379548][ T6423] Call Trace: [ 438.382836][ T6423] [ 438.385777][ T6423] dump_stack_lvl+0xcd/0x134 [ 438.390382][ T6423] panic+0x2c8/0x627 [ 438.394324][ T6423] ? panic_print_sys_info.part.0+0x10b/0x10b [ 438.400306][ T6423] ? preempt_schedule_common+0x59/0xc0 [ 438.405762][ T6423] ? preempt_schedule_thunk+0x16/0x18 [ 438.411133][ T6423] ? drm_gem_object_release_handle+0xa1/0xb0 [ 438.417109][ T6423] end_report.part.0+0x3f/0x7c [ 438.421871][ T6423] kasan_report.cold+0xa/0xf [ 438.426461][ T6423] ? drm_gem_object_release_handle+0xa1/0xb0 [ 438.432434][ T6423] drm_gem_object_release_handle+0xa1/0xb0 [ 438.438236][ T6423] ? drm_gem_object_handle_put_unlocked+0x390/0x390 [ 438.444819][ T6423] idr_for_each+0x113/0x220 [ 438.449342][ T6423] ? idr_find+0x50/0x50 [ 438.453498][ T6423] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 438.459300][ T6423] drm_gem_release+0x22/0x30 [ 438.463889][ T6423] drm_file_free.part.0+0x805/0xb80 [ 438.469087][ T6423] ? fsnotify+0x1680/0x1680 [ 438.473584][ T6423] drm_close_helper.isra.0+0x17d/0x1f0 [ 438.479044][ T6423] drm_release+0x1e6/0x530 [ 438.483451][ T6423] __fput+0x277/0x9d0 [ 438.487425][ T6423] ? drm_release_noglobal+0x180/0x180 [ 438.492798][ T6423] task_work_run+0xdd/0x1a0 [ 438.497316][ T6423] exit_to_user_mode_prepare+0x23c/0x250 [ 438.502946][ T6423] syscall_exit_to_user_mode+0x19/0x50 [ 438.508406][ T6423] do_syscall_64+0x42/0xb0 [ 438.512820][ T6423] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 438.518711][ T6423] RIP: 0033:0x7efebce3c04b [ 438.523117][ T6423] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 438.542725][ T6423] RSP: 002b:00007ffc17634d20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 438.551218][ T6423] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007efebce3c04b [ 438.559199][ T6423] RDX: 00007efebcfa08d0 RSI: ffffffffffffffff RDI: 0000000000000003 [ 438.567165][ T6423] RBP: 00007efebcf9d980 R08: 0000000000000000 R09: 00007efebcfa08d8 [ 438.575128][ T6423] R10: 00007ffc17634e20 R11: 0000000000000293 R12: 000000000006ad61 [ 438.583103][ T6423] R13: 00007ffc17634e20 R14: 00007efebcf9bf80 R15: 0000000000000032 [ 438.591083][ T6423] [ 438.594247][ T6423] Kernel Offset: disabled [ 438.598579][ T6423] Rebooting in 86400 seconds..