7680000000000"], 0x5f)

19:51:15 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xc00e0000}, 0x0)

[ 1363.819388][T11769] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1363.851166][T11769] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1363.888146][   T25] audit: type=1800 audit(1572119475.644:530): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18053 res=0
19:51:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300600002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:15 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000000000a000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1364.242381][T11784] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1364.297824][T11784] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:16 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:16 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xf0ffffff}, 0x0)

19:51:16 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, 0x0)
readv(r4, &(0x7f00000001c0), 0xce)

19:51:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300680002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:16 executing program 2:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8000000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:16 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000000000e000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1364.698049][T11797] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1364.726366][T11797] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:16 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xffffff7f}, 0x0)

19:51:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003006c0002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:16 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:16 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, 0x0)
readv(r4, &(0x7f00000001c0), 0xce)

[ 1365.093344][T11916] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1365.125190][T11916] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:17 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xffffff9e}, 0x0)

19:51:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300740002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:17 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000000000f000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:17 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xfffffff0}, 0x0)

[ 1365.550996][T11933] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003007a0002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:17 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000005f000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:17 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x40030000000000}, 0x0)

[ 1365.863965][T11941] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1365.941634][   T25] audit: type=1800 audit(1572119477.694:531): pid=11940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18058 res=0
19:51:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030ec00002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:17 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000010000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:17 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x100000000000000}, 0x0)

[ 1366.191113][T11953] validate_nla: 2 callbacks suppressed
[ 1366.191197][T11953] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1366.317428][T11953] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:18 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080))
readv(r4, &(0x7f00000001c0), 0xce)

19:51:18 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x200000000000000}, 0x0)

19:51:18 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030af50002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:18 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000011000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1366.713498][T11969] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc7d16c1e207bfaf78d0306627b9b9629887fbd29b6625c980abc76aa03fec507da4c8faa0e9260a3ee28593931da734a9e4201945b02cf20d1e9110f8d37c0f3f2d9cbac5274f01379f33d5c5381197fc14ecb2d676d578d6a7e01c46f4fce5816f9c376a9ad250e09a9166670b99199bff1bf5b8474aaf8954586a1c834dff7fb2a7b8d510ee0d0bdad90500a7d056857f9be254ad2eedc9a19340d0808d6eab709eeaf912d2a699ecc143ca83fee5ffd989fb", 0x1, 0x83733d379ec778bb, 0x0, 0xffffffffffffff2f)

19:51:18 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x300000000000000}, 0x0)

19:51:18 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080))
readv(r4, &(0x7f00000001c0), 0xce)

19:51:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000003000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:18 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000115a29000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1367.167928][T11992] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1367.192739][T11992] __nla_validate_parse: 1 callbacks suppressed
19:51:19 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x400000000000000}, 0x0)

19:51:19 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000011000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1367.225054][T11992] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000a000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:19 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080))
readv(r4, &(0x7f00000001c0), 0xce)

[ 1367.532696][T12104] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1367.590836][T12104] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:19 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:19 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x500000000000000}, 0x0)

19:51:19 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(0xffffffffffffffff, &(0x7f00000001c0), 0xce)

19:51:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000005a000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:19 executing program 2:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000034000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1368.111235][T12121] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1368.146919][T12121] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:19 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x600000000000000}, 0x0)

19:51:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000067000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:20 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(0xffffffffffffffff, &(0x7f00000001c0), 0xce)

[ 1368.489079][T12140] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:20 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x700000000000000}, 0x0)

[ 1368.547345][T12140] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:20 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(0xffffffffffffffff, &(0x7f00000001c0), 0xce)

19:51:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300020002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1368.997294][T12155] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1369.029148][   T25] audit: type=1800 audit(1572119480.784:532): pid=12147 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18063 res=0
[ 1369.063424][T12155] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:21 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x800000000000000}, 0x0)

19:51:21 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, 0x0, 0x0)

19:51:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300030002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:21 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000240000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:21 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000e000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1369.442244][T12168] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1369.492741][T12168] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x900000000000000}, 0x0)

19:51:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300040002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:21 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, 0x0, 0x0)

19:51:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xa00000000000000}, 0x0)

[ 1369.942493][T12191] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1369.970617][T12191] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1370.069235][   T25] audit: type=1800 audit(1572119481.824:533): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18071 res=0
19:51:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300050002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xb00000000000000}, 0x0)

[ 1370.142858][    C0] net_ratelimit: 10 callbacks suppressed
[ 1370.142875][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1370.154519][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1370.162116][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1370.168770][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1370.338103][T12298] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1370.377675][T12298] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:22 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:22 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000000005f000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:22 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, 0x0, 0x0)

19:51:22 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000240000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300060002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:22 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xc00000000000000}, 0x0)

[ 1370.815806][T12318] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:22 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xd00000000000000}, 0x0)

19:51:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300070002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:22 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000007000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:22 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xe00000000000000}, 0x0)

[ 1371.204886][T12331] validate_nla: 1 callbacks suppressed
[ 1371.204902][T12331] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1371.302923][T12331] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1371.341449][   T25] audit: type=1800 audit(1572119483.094:534): pid=12322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18073 res=0
19:51:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000a0002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:23 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000003e8000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1371.544731][T12341] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:23 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4000, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:23 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xf00000000000000}, 0x0)

19:51:23 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000000005f000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000e0002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:23 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000a0002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:23 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000001f4000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1372.172171][T12456] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[ 1372.210915][T12462] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:24 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x1900000000000000}, 0x0)

[ 1372.268995][T12462] __nla_validate_parse: 2 callbacks suppressed
[ 1372.269040][T12462] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:24 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x2000000000000000}, 0x0)

19:51:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x2}, 0x0)

19:51:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000f0002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:24 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x4800000000000000}, 0x0)

[ 1372.689465][T12481] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1372.733160][T12481] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
19:51:24 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180003400000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1372.789369][T12479] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1372.818952][T12479] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1372.971089][   T25] audit: type=1800 audit(1572119484.724:535): pid=12476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16737 res=0
19:51:25 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10002}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:25 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000900000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:25 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x4c00000000000000}, 0x0)

19:51:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300480002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:25 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000ffffffff000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:25 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180003400000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1373.403892][T12500] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1373.461283][T12500] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:25 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x6000000000000000}, 0x0)

19:51:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003004c0002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1373.755087][T12556] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1373.784796][T12556] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:25 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x6800000000000000}, 0x0)

19:51:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300600002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:25 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000900000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:25 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1374.070574][T12627] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1374.098159][T12627] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1374.366056][T12635] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[ 1374.410026][T12635] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'.
19:51:26 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10004}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:26 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x6c00000000000000}, 0x0)

19:51:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300680002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:26 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000ffffffffffffffff000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:26 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000400000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000900000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1374.797072][T12749] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:26 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x7400000000000000}, 0x0)

19:51:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003006c0002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:26 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x7a00000000000000}, 0x0)

[ 1375.148555][T12866] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1375.202722][   T25] audit: type=1800 audit(1572119486.954:536): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17038 res=0
19:51:27 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300740002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:27 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000002000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1375.500546][T12872] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
19:51:27 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x14000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:27 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000200000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:27 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x9906000000000000}, 0x0)

19:51:27 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003007a0002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:27 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000003000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:27 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000ffffffff00000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000302000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:28 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x9effffff00000000}, 0x0)

[ 1376.413402][T12911] validate_nla: 7 callbacks suppressed
[ 1376.413418][T12911] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000502000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:28 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xc00e000000000000}, 0x0)

[ 1376.635467][   T25] audit: type=1800 audit(1572119488.394:537): pid=12904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17046 res=0
19:51:28 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0703000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1376.785023][T13019] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:29 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000004000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000602000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:29 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

19:51:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:29 executing program 2 (fault-call:10 fault-nth:0):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xce)

[ 1377.438115][T13041] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1377.464089][T13041] __nla_validate_parse: 7 callbacks suppressed
[ 1377.464124][T13041] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:29 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xffffff7f00000000}, 0x0)

[ 1377.504505][T13044] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1377.523235][T13040] FAULT_INJECTION: forcing a failure.
[ 1377.523235][T13040] name failslab, interval 1, probability 0, space 0, times 0
[ 1377.558320][T13044] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1377.592942][T13040] CPU: 1 PID: 13040 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0
[ 1377.600951][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1377.611016][T13040] Call Trace:
[ 1377.614361][T13040]  dump_stack+0xf5/0x159
[ 1377.618745][T13040]  should_fail.cold+0xa/0x1a
[ 1377.623414][T13040]  __should_failslab+0xee/0x130
[ 1377.628286][T13040]  should_failslab+0x9/0x14
[ 1377.632882][T13040]  __kmalloc+0x53/0x690
[ 1377.637067][T13040]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1377.642724][T13040]  ? rw_copy_check_uvector+0x241/0x270
[ 1377.648328][T13040]  rw_copy_check_uvector+0x241/0x270
19:51:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000702000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1377.653696][T13040]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1377.659367][T13040]  import_iovec+0x67/0x220
[ 1377.663820][T13040]  vfs_readv+0x72/0xf0
[ 1377.667916][T13040]  ? __fget+0xb8/0x1d0
[ 1377.672088][T13040]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1377.677753][T13040]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1377.683412][T13040]  ? __tsan_read4+0x2c/0x30
[ 1377.687981][T13040]  do_readv+0xe3/0x250
[ 1377.692087][T13040]  __x64_sys_readv+0x4e/0x60
[ 1377.696708][T13040]  do_syscall_64+0xcc/0x370
[ 1377.701247][T13040]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1377.707158][T13040] RIP: 0033:0x459f39
[ 1377.711261][T13040] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1377.731167][T13040] RSP: 002b:00007fbf6390cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 1377.739691][T13040] RAX: ffffffffffffffda RBX: 00007fbf6390cc90 RCX: 0000000000459f39
[ 1377.747710][T13040] RDX: 00000000000000ce RSI: 00000000200001c0 RDI: 0000000000000008
[ 1377.755696][T13040] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1377.763755][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf6390d6d4
[ 1377.771879][T13040] R13: 00000000004c769f R14: 00000000004dd4a8 R15: 0000000000000009
[ 1377.782326][T13049] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:29 executing program 0 (fault-call:7 fault-nth:0):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1377.827936][T13049] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000007000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000a02000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:29 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xffffffff00000000}, 0x0)

[ 1378.107523][T13059] FAULT_INJECTION: forcing a failure.
[ 1378.107523][T13059] name failslab, interval 1, probability 0, space 0, times 0
[ 1378.191024][T13059] CPU: 0 PID: 13059 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0
[ 1378.199245][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1378.209313][T13059] Call Trace:
[ 1378.212707][T13059]  dump_stack+0xf5/0x159
[ 1378.216998][T13059]  should_fail.cold+0xa/0x1a
[ 1378.221642][T13059]  __should_failslab+0xee/0x130
[ 1378.226521][T13059]  should_failslab+0x9/0x14
[ 1378.231053][T13059]  kmem_cache_alloc_node+0x39/0x660
[ 1378.236274][T13059]  ? process_measurement+0x132/0xff0
[ 1378.241596][T13059]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1378.246820][T13067] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1378.247259][T13059]  __alloc_skb+0x8e/0x350
[ 1378.247291][T13059]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1378.247378][T13059]  sock_omalloc+0xa3/0x120
[ 1378.264797][T13067] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1378.265704][T13059]  sock_zerocopy_alloc+0x6a/0x1a0
[ 1378.265795][T13059]  sock_zerocopy_realloc+0x106/0x280
[ 1378.289701][T13059]  tcp_sendmsg_locked+0x143a/0x1f30
[ 1378.294929][T13059]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1378.300613][T13059]  ? __tsan_read8+0x2c/0x30
[ 1378.305665][T13059]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1378.312073][T13059]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1378.317826][T13059]  ? __tsan_read8+0x2c/0x30
[ 1378.322491][T13059]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1378.328212][T13059]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1378.334530][T13059]  ? __local_bh_enable_ip+0x32/0x80
[ 1378.339789][T13059]  tcp_sendmsg+0x39/0x60
[ 1378.344158][T13059]  inet_sendmsg+0x6d/0x90
[ 1378.348513][T13059]  ? inet_send_prepare+0x200/0x200
[ 1378.353655][T13059]  sock_sendmsg+0x9f/0xc0
[ 1378.358015][T13059]  __sys_sendto+0x21f/0x320
[ 1378.362564][T13059]  ? __sb_end_write+0xbe/0x100
[ 1378.367349][T13059]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1378.373093][T13059]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1378.378947][T13059]  ? fput_many+0xec/0x130
[ 1378.383308][T13059]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1378.389320][T13059]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1378.394998][T13059]  __x64_sys_sendto+0x89/0xb0
[ 1378.399938][T13059]  do_syscall_64+0xcc/0x370
[ 1378.404475][T13059]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1378.410386][T13059] RIP: 0033:0x459f39
[ 1378.414335][T13059] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1378.435003][T13059] RSP: 002b:00007f4f94abac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1378.443455][T13059] RAX: ffffffffffffffda RBX: 00007f4f94abac90 RCX: 0000000000459f39
[ 1378.451570][T13059] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003
[ 1378.459561][T13059] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1378.468431][T13059] R10: 83733d379ec778bb R11: 0000000000000246 R12: 00007f4f94abb6d4
[ 1378.476429][T13059] R13: 00000000004c83aa R14: 00000000004de510 R15: 0000000000000004
19:51:30 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x20010000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:30 executing program 2 (fault-call:10 fault-nth:1):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xce)

19:51:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300f50a02000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:30 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:30 executing program 0 (fault-call:7 fault-nth:1):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:51:30 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000009000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1378.989300][T13085] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1379.011039][T13086] FAULT_INJECTION: forcing a failure.
[ 1379.011039][T13086] name failslab, interval 1, probability 0, space 0, times 0
[ 1379.025590][T13085] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1379.035846][T13086] CPU: 1 PID: 13086 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0
[ 1379.043895][T13086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1379.054670][T13086] Call Trace:
[ 1379.058082][T13086]  dump_stack+0xf5/0x159
[ 1379.062583][T13086]  should_fail.cold+0xa/0x1a
[ 1379.067244][T13086]  __should_failslab+0xee/0x130
[ 1379.072209][T13086]  should_failslab+0x9/0x14
[ 1379.076830][T13086]  kmem_cache_alloc_node_trace+0x3b/0x670
[ 1379.082963][T13086]  ? __tsan_read8+0x2c/0x30
[ 1379.088069][T13086]  ? memcg_kmem_put_cache+0x91/0xe0
[ 1379.093625][T13086]  __kmalloc_node_track_caller+0x38/0x50
[ 1379.099407][T13086]  __kmalloc_reserve.isra.0+0x49/0xd0
[ 1379.104996][T13086]  __alloc_skb+0xc2/0x350
[ 1379.109488][T13086]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1379.115663][T13086]  sock_omalloc+0xa3/0x120
[ 1379.120137][T13086]  sock_zerocopy_alloc+0x6a/0x1a0
[ 1379.125256][T13086]  sock_zerocopy_realloc+0x106/0x280
[ 1379.130747][T13086]  tcp_sendmsg_locked+0x143a/0x1f30
[ 1379.136034][T13086]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1379.141733][T13086]  ? __tsan_read8+0x2c/0x30
[ 1379.146256][T13086]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1379.152764][T13086]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1379.158411][T13086]  ? __tsan_read8+0x2c/0x30
[ 1379.162942][T13086]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1379.168782][T13086]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1379.175241][T13086]  ? __local_bh_enable_ip+0x32/0x80
[ 1379.180503][T13086]  tcp_sendmsg+0x39/0x60
[ 1379.185403][T13086]  inet_sendmsg+0x6d/0x90
[ 1379.189767][T13086]  ? inet_send_prepare+0x200/0x200
[ 1379.194973][T13086]  sock_sendmsg+0x9f/0xc0
[ 1379.199336][T13086]  __sys_sendto+0x21f/0x320
[ 1379.203876][T13086]  ? __sb_end_write+0xbe/0x100
[ 1379.209185][T13086]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1379.215110][T13086]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1379.220758][T13086]  ? fput_many+0xec/0x130
[ 1379.225283][T13086]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1379.231410][T13086]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1379.237154][T13086]  __x64_sys_sendto+0x89/0xb0
[ 1379.242047][T13086]  do_syscall_64+0xcc/0x370
[ 1379.246691][T13086]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1379.252589][T13086] RIP: 0033:0x459f39
[ 1379.256512][T13086] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1379.277755][T13086] RSP: 002b:00007f4f94abac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1379.286563][T13086] RAX: ffffffffffffffda RBX: 00007f4f94abac90 RCX: 0000000000459f39
[ 1379.295299][T13086] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003
[ 1379.303462][T13086] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1379.311755][T13086] R10: 83733d379ec778bb R11: 0000000000000246 R12: 00007f4f94abb6d4
[ 1379.319918][T13086] R13: 00000000004c83aa R14: 00000000004de510 R15: 0000000000000004
[ 1379.341977][T13087] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1379.364520][T13087] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000e02000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:31 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0)

19:51:31 executing program 0 (fault-call:7 fault-nth:2):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1379.553033][T13096] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1379.632881][T13096] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300c00e02000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1379.734623][T13100] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1379.788451][T13100] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1379.814705][   T25] audit: type=1800 audit(1572119491.574:538): pid=13102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17063 res=0
[ 1379.830505][T13103] FAULT_INJECTION: forcing a failure.
[ 1379.830505][T13103] name failslab, interval 1, probability 0, space 0, times 0
[ 1379.932626][T13103] CPU: 0 PID: 13103 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0
[ 1379.941082][T13103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1379.945031][T13107] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1379.951632][T13103] Call Trace:
[ 1379.951683][T13103]  dump_stack+0xf5/0x159
[ 1379.951735][T13103]  should_fail.cold+0xa/0x1a
[ 1379.974171][T13103]  __should_failslab+0xee/0x130
[ 1379.979412][T13103]  should_failslab+0x9/0x14
[ 1379.984063][T13103]  kmem_cache_alloc_node+0x39/0x660
[ 1379.989507][T13103]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1379.995193][T13103]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.001089][T13103]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1380.008847][T13103]  __alloc_skb+0x8e/0x350
[ 1380.013259][T13103]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.019186][T13103]  sk_stream_alloc_skb+0xf5/0x680
[ 1380.024488][T13103]  tcp_sendmsg_locked+0x95e/0x1f30
[ 1380.029644][T13103]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.035343][T13103]  ? __tsan_read8+0x2c/0x30
[ 1380.040025][T13103]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.045923][T13103]  tcp_sendmsg+0x39/0x60
[ 1380.050558][T13103]  inet_sendmsg+0x6d/0x90
[ 1380.055039][T13103]  ? inet_send_prepare+0x200/0x200
[ 1380.060253][T13103]  sock_sendmsg+0x9f/0xc0
[ 1380.064653][T13103]  __sys_sendto+0x21f/0x320
[ 1380.069325][T13103]  ? __sb_end_write+0xbe/0x100
[ 1380.074342][T13103]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.080502][T13103]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.086484][T13103]  ? fput_many+0xec/0x130
[ 1380.091159][T13103]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.096941][T13103]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.102910][T13103]  __x64_sys_sendto+0x89/0xb0
[ 1380.107642][T13103]  do_syscall_64+0xcc/0x370
[ 1380.112443][T13103]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1380.118496][T13103] RIP: 0033:0x459f39
[ 1380.122455][T13103] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1380.142584][T13103] RSP: 002b:00007f4f94abac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1380.151265][T13103] RAX: ffffffffffffffda RBX: 00007f4f94abac90 RCX: 0000000000459f39
[ 1380.159373][T13103] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003
[ 1380.167702][T13103] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1380.175770][T13103] R10: 83733d379ec778bb R11: 0000000000000246 R12: 00007f4f94abb6d4
19:51:31 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000a000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000f02000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1380.183885][T13103] R13: 00000000004c83aa R14: 00000000004de510 R15: 0000000000000004
[ 1380.212245][T13113] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1380.437800][   T25] audit: type=1800 audit(1572119492.194:539): pid=13118 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17069 res=0
19:51:32 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x2}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x3}, 0x0)

19:51:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xce)

19:51:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300002002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:32 executing program 0 (fault-call:7 fault-nth:3):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:51:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000e000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1380.725678][T13128] FAULT_INJECTION: forcing a failure.
[ 1380.725678][T13128] name failslab, interval 1, probability 0, space 0, times 0
19:51:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300004802000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1380.782496][T13128] CPU: 1 PID: 13128 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0
[ 1380.790446][T13128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1380.800654][T13128] Call Trace:
[ 1380.804095][T13128]  dump_stack+0xf5/0x159
[ 1380.808409][T13128]  should_fail.cold+0xa/0x1a
[ 1380.813229][T13128]  __should_failslab+0xee/0x130
[ 1380.818255][T13128]  should_failslab+0x9/0x14
[ 1380.823039][T13128]  kmem_cache_alloc_node_trace+0x3b/0x670
[ 1380.828893][T13128]  ? __tsan_read8+0x2c/0x30
[ 1380.833476][T13128]  ? memcg_kmem_put_cache+0x91/0xe0
[ 1380.839042][T13128]  __kmalloc_node_track_caller+0x38/0x50
[ 1380.844755][T13128]  __kmalloc_reserve.isra.0+0x49/0xd0
[ 1380.850217][T13128]  __alloc_skb+0xc2/0x350
[ 1380.854878][T13128]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.860916][T13128]  sk_stream_alloc_skb+0xf5/0x680
[ 1380.866049][T13128]  tcp_sendmsg_locked+0x95e/0x1f30
[ 1380.871195][T13128]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.876993][T13128]  ? __tsan_read8+0x2c/0x30
19:51:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x4}, 0x0)

19:51:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300004c02000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1380.881638][T13128]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.887376][T13128]  tcp_sendmsg+0x39/0x60
[ 1380.891743][T13128]  inet_sendmsg+0x6d/0x90
[ 1380.896190][T13128]  ? inet_send_prepare+0x200/0x200
[ 1380.901414][T13128]  sock_sendmsg+0x9f/0xc0
[ 1380.905842][T13128]  __sys_sendto+0x21f/0x320
[ 1380.910575][T13128]  ? __sb_end_write+0xbe/0x100
[ 1380.915384][T13128]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.921264][T13128]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.929531][T13128]  ? fput_many+0xec/0x130
[ 1380.933894][T13128]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.939613][T13128]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1380.945604][T13128]  __x64_sys_sendto+0x89/0xb0
[ 1380.950419][T13128]  do_syscall_64+0xcc/0x370
[ 1380.955049][T13128]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1380.961048][T13128] RIP: 0033:0x459f39
[ 1380.965091][T13128] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1380.985276][T13128] RSP: 002b:00007f4f94abac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1380.993964][T13128] RAX: ffffffffffffffda RBX: 00007f4f94abac90 RCX: 0000000000459f39
[ 1381.002144][T13128] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003
[ 1381.012601][T13128] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1381.020882][T13128] R10: 83733d379ec778bb R11: 0000000000000246 R12: 00007f4f94abb6d4
[ 1381.028979][T13128] R13: 00000000004c83aa R14: 00000000004de510 R15: 0000000000000004
19:51:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)

19:51:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300006002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1381.102841][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1381.102859][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1381.102899][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1381.108847][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:51:33 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x6}, 0x0)

[ 1381.342846][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1381.348712][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1381.354890][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1381.361168][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1381.500529][T13158] validate_nla: 9 callbacks suppressed
[ 1381.500549][T13158] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1381.532383][   T25] audit: type=1800 audit(1572119493.284:540): pid=13156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17076 res=0
19:51:33 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x4}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300006802000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:33 executing program 0 (fault-call:7 fault-nth:4):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:51:33 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x7}, 0x0)

19:51:33 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000f000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:33 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x2)

[ 1382.242076][T13169] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1382.275524][T13174] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:34 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x8}, 0x0)

19:51:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300006c02000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:34 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:51:34 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x3)

[ 1382.599933][T13193] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1382.660326][T13193] __nla_validate_parse: 10 callbacks suppressed
[ 1382.660345][T13193] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1382.714691][T13192] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1382.737300][T13192] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:34 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x2, 0x83733d379ec778bb, 0x0, 0x0)

19:51:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300007402000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1382.766321][   T25] audit: type=1800 audit(1572119494.524:541): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17489 res=0
[ 1383.025176][T13253] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1383.069798][T13253] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:35 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x4000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:35 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x9}, 0x0)

19:51:35 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000010000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x4)

19:51:35 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x7, 0x83733d379ec778bb, 0x0, 0x0)

19:51:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300007a02000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1383.536119][T13322] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1383.573582][T13322] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1383.597768][T13324] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1383.614186][T13324] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000ec002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:35 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xa}, 0x0)

19:51:35 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x218, 0x83733d379ec778bb, 0x0, 0x0)

19:51:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x5)

[ 1383.903839][T13438] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1383.942865][T13438] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1383.988784][T13440] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1384.019604][T13440] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1384.042944][   T25] audit: type=1800 audit(1572119495.794:542): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17569 res=0
19:51:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000af502000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:36 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xb}, 0x0)

[ 1384.384426][T13554] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1384.433042][T13555] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:36 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x1000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:36 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x300, 0x83733d379ec778bb, 0x0, 0x0)

19:51:36 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000011000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:36 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x6)

19:51:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000202000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:36 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0)

[ 1384.818265][T13569] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000302000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:36 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xd}, 0x0)

19:51:36 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x7)

19:51:36 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x20000101, 0x83733d379ec778bb, 0x0, 0x0)

19:51:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000402000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:37 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xe}, 0x0)

[ 1385.347218][   T25] audit: type=1800 audit(1572119497.104:543): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17553 res=0
19:51:37 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x2000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000502000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:37 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000034000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x8)

19:51:37 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xf}, 0x0)

19:51:37 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x19}, 0x0)

19:51:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000602000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:38 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0xfffffdef, 0x83733d379ec778bb, 0x0, 0x0)

19:51:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x9)

19:51:38 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x48}, 0x0)

[ 1386.511181][   T25] audit: type=1800 audit(1572119498.264:544): pid=13822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17601 res=0
19:51:38 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000005f000000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000702000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1386.725120][T13840] validate_nla: 11 callbacks suppressed
[ 1386.725138][T13840] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1386.792842][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1386.798696][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1386.804782][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1386.810573][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1386.909622][T13849] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:39 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x4000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:39 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0)

19:51:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000a02000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa)

19:51:39 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000f4010000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:39 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0xffffffa6, 0x83733d379ec778bb, 0x0, 0x0)

[ 1387.453290][T13962] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1387.499313][T13967] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:39 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x60}, 0x0)

19:51:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xb)

19:51:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000e02000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1387.831558][T13984] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1387.912861][T13984] __nla_validate_parse: 12 callbacks suppressed
[ 1387.912880][T13984] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1387.933150][   T25] audit: type=1800 audit(1572119499.694:545): pid=13975 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17666 res=0
19:51:39 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000040020000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1388.025482][T13988] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1388.059630][T13988] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:39 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x68}, 0x0)

19:51:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000f02000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1388.233678][T13995] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1388.273878][T13995] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1388.420104][T14002] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1388.452888][T14002] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:40 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x40000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xc)

19:51:40 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x6c}, 0x0)

19:51:40 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0xffffffef, 0x83733d379ec778bb, 0x0, 0x0)

19:51:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300004802000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:40 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000030000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1388.868238][T14114] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1388.922517][T14114] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1388.961272][T14116] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1388.990215][T14116] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300004c02000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:40 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x74}, 0x0)

19:51:41 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xd)

[ 1389.295934][T14131] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1389.343639][T14130] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:41 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000e8030000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:41 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x7a}, 0x0)

19:51:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300006002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1389.704925][T14144] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1389.749200][T14186] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:41 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x100000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:41 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xe)

19:51:41 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x300}, 0x0)

19:51:41 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xa)

19:51:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300006802000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:41 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000070000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:42 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xf)

19:51:42 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x500}, 0x0)

19:51:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300006c02000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1390.552865][   T25] audit: type=1800 audit(1572119502.304:546): pid=14263 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17125 res=0
19:51:42 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xf)

19:51:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300007402000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:42 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000090000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:43 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x200000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:43 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x600}, 0x0)

19:51:43 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x11)

19:51:43 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x10)

19:51:43 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300007a02000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:43 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000a0000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:43 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xa00)

19:51:43 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x699}, 0x0)

[ 1391.742836][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1391.748669][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1391.754512][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1391.760298][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:51:43 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000003000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1391.935787][T14624] validate_nla: 11 callbacks suppressed
[ 1391.935803][T14624] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:51:43 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xf00)

19:51:43 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x11)

[ 1392.061033][T14727] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:43 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x700}, 0x0)

[ 1392.313488][   T25] audit: type=1800 audit(1572119504.074:547): pid=14725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17128 res=0
[ 1392.342654][T14823] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:51:44 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x400000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000a000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:44 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000e0000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:44 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x1100)

19:51:44 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x12)

19:51:44 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x900}, 0x0)

[ 1392.843950][T14854] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1392.907326][T14855] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1392.922969][T14855] __nla_validate_parse: 11 callbacks suppressed
[ 1392.922986][T14855] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000005a000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:44 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x1000000)

19:51:44 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

19:51:45 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x13)

[ 1393.184503][T14967] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1393.192712][T14967] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1393.350866][T15009] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:51:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000067000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1393.393050][T15009] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:45 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xa000000)

[ 1393.655482][T15083] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1393.677569][T15083] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:45 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x4000000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:45 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000f0000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:45 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xb00}, 0x0)

19:51:45 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x14)

19:51:45 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xf000000)

19:51:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000003000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1394.189125][T15201] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1394.218372][T15201] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1394.253238][T15200] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1394.262209][T15200] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000a000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:46 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x15)

19:51:46 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x11000000)

19:51:46 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xc00}, 0x0)

[ 1394.593579][   T25] audit: type=1800 audit(1572119506.354:548): pid=15314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17937 res=0
[ 1394.603306][T15321] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:46 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000110000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:46 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xa6ffffff)

[ 1394.734254][T15322] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:47 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x8000000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000005a000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:47 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xd00}, 0x0)

19:51:47 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x16)

19:51:47 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xf2ffffff)

19:51:47 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000340000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1395.561317][T15563] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1395.587296][T15565] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000067000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1395.662818][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1395.662854][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1395.668641][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:51:47 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xffffffa6)

19:51:47 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xe00}, 0x0)

19:51:47 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x17)

[ 1395.895229][   T25] audit: type=1800 audit(1572119507.654:549): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18086 res=0
19:51:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002020000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:47 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000002400000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:48 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x2}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:48 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xec0}, 0x0)

19:51:48 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xfffffff2)

19:51:48 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x18)

19:51:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002030000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:48 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000005f0000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002040000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:48 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xf00}, 0x0)

19:51:48 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x100000000000000)

19:51:48 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x19)

[ 1397.132928][T15947] validate_nla: 9 callbacks suppressed
[ 1397.133003][T15947] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1397.219570][T15949] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:51:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002050000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:49 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x1900}, 0x0)

[ 1397.358305][   T25] audit: type=1800 audit(1572119509.114:550): pid=15943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18092 res=0
[ 1397.516949][T16073] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1397.599889][T16076] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:49 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x4}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:49 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000003e80000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:49 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xa00000000000000)

19:51:49 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x2000}, 0x0)

19:51:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x1a)

19:51:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002060000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1398.168001][T16094] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1398.176528][T16094] __nla_validate_parse: 9 callbacks suppressed
[ 1398.176546][T16094] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:50 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x4800}, 0x0)

[ 1398.255268][T16099] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1398.282222][T16099] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:50 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xf00000000000000)

19:51:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x1b)

[ 1398.458204][T16210] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:51:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002070000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1398.508523][T16210] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:50 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x4c00}, 0x0)

[ 1398.709742][T16296] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1398.732827][T16296] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:50 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000001f40000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:51 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x4000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x1100000000000000)

19:51:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000000020a0000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x1c)

19:51:51 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

19:51:51 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000295a1100000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1399.439565][T16358] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1399.472349][T16358] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1399.503020][T16359] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1399.531029][T16359] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000000020e0000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xa6ffffff00000000)

19:51:51 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x6800}, 0x0)

19:51:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x1d)

[ 1399.799808][T16472] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1399.836280][   T25] audit: type=1800 audit(1572119511.594:551): pid=16470 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18103 res=0
[ 1399.892006][T16476] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:51 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000281400000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000000020f0000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1400.291782][T16590] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:52 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x1000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:52 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x6c00}, 0x0)

19:51:52 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0xf2ffffff00000000)

19:51:52 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x1e)

19:51:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002480000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:52 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000142800000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1400.733220][T16604] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:52 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

19:51:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000000024c0000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:52 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x21)

19:51:52 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x18, 0x0, 0x8, "dbe9b60aa97b89452e6f3fe8605edd3530a43a08b7cbe19cf78a87b3f99702b38f83fe5e8dfa05b2173b8bbfafd4febc4a443485dd1875e0d2bb4476589516be", "0aa826195e69c0908cccc6c62a34d0f08be15f37c5b8c01d174c79ed338ade7228ac3ec4d1d7031532845ca090af4c59450ccc7d8c1a737cdc364fe60b1b440a", "01ed7e14c7a85ecff8c40c03f05ccd9d51bdc3dd01f783fbbb1ac990bbf6f3ec", [0x7, 0x1]})
setsockopt$inet_tcp_int(r0, 0x6, 0x1000000001a, &(0x7f0000000080)=0x5, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0x1, 0x8)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:51:52 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x7a00}, 0x0)

19:51:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002600000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1401.377562][   T25] audit: type=1800 audit(1572119513.134:552): pid=16613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17171 res=0
19:51:53 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x22)

19:51:53 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x9906}, 0x0)

19:51:53 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000008000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:53 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:51:53 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x2000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002680000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:53 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

19:51:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000000026c0000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:54 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1402.344639][T16965] validate_nla: 11 callbacks suppressed
[ 1402.344654][T16965] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:54 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x23)

[ 1402.412496][T16966] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1402.498036][   T25] audit: type=1800 audit(1572119514.254:553): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16801 res=0
19:51:54 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x34000}, 0x0)

19:51:54 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000001000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002740000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:54 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x9, 0x40000)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x8, @bearer=@l2={'eth', 0x3a, 'sit0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000101}, 0x4000840)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=0x10004, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1402.838259][T17082] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:51:54 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x24)

[ 1402.967036][T17165] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:54 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x400300}, 0x0)

[ 1403.162128][T17197] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1403.220643][T17197] __nla_validate_parse: 11 callbacks suppressed
[ 1403.220661][T17197] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:55 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x4000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:55 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.cpus\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)="3fb691bc7c0db82dfc32e62de10206ed43bce1a14e5e665f817c232833909b1f1622ce2eeedc90e3e68b44868eca", 0x2e)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000140)={0x0, @data})
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000002640)={0x0, 0x1f, 0x4, 0xc40e}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000040)=0x4, 0x4)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:51:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000000027a0000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:55 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x25)

19:51:55 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)

[ 1403.388341][   T25] audit: type=1800 audit(1572119515.144:554): pid=17193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16897 res=0
[ 1403.531044][T17210] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:51:55 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000002000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1403.583199][T17210] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1403.601456][T17212] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1403.616608][T17212] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:55 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x3ed)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0xffffff1e, 0x0, 0x0, 0x205)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:51:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000300f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:55 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)

19:51:55 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x26)

[ 1403.924343][T17328] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1403.932475][T17328] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:55 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000040)={0x5, @random="bbb82f031f34"})
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1404.029639][T17331] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1404.047292][T17331] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000500f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1404.347456][   T25] audit: type=1800 audit(1572119516.104:555): pid=17333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16883 res=0
[ 1404.397488][T17385] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1404.438868][T17385] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:56 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x40000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:56 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x3000000}, 0x0)

19:51:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x27)

19:51:56 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000003000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000600f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:56 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x402200)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100))
sendto$inet(r0, &(0x7f0000000080)="d6caf7bd62576a0041c6f1349ea64bb8abb0908327d6f5b58e24c29465f7638cda90f5e94d510a88c3283924fe8d6b40f4fcc7d82a0db38aeb7841853f0233", 0x1, 0x4000000, 0x0, 0xfffffffffffffff8)

[ 1404.841603][T17456] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1404.871641][T17454] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000700f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:56 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)

19:51:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x28)

[ 1405.112970][T17571] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:51:56 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000d06000)=0xa0000001, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r1 = getpid()
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000200)={'gre0\x00', @ifru_flags=0x2000}})
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080))
syz_open_procfs(r1, 0x0)
waitid(0x1, r1, 0x0, 0x1, &(0x7f0000000140))
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'ip6erspan0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
lsetxattr$security_evm(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.evm\x00', &(0x7f0000000380)=@sha1={0x1, "21e830226a4098b5cdae5f9767add49f3b160137"}, 0x15, 0x2)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1405.167891][T17575] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:51:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000a00f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:57 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)

[ 1405.450430][   T25] audit: type=1800 audit(1572119517.204:556): pid=17568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16962 res=0
19:51:57 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x100000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:57 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0xfff, 0x0, 0xfffffffffffffffa})
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000280)=""/208)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r5 = getpid()
syz_open_procfs(r5, 0x0)
sched_getattr(r5, &(0x7f0000000080)={0x30}, 0x30, 0x0)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000040)=0x7)

19:51:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x29)

19:51:57 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x6000000}, 0x0)

19:51:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002f50a00f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:57 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000004000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:58 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000e00f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:58 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x7000000}, 0x0)

19:51:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x2a)

19:51:58 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002c00e00f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:58 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)

[ 1406.671340][   T25] audit: type=1800 audit(1572119518.424:557): pid=17815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17089 res=0
19:51:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x2b)

19:51:59 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x200000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:51:59 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000f00f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:59 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000007000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:59 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x9000000}, 0x0)

19:51:59 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x18, 0x200000)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x100, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='\x00\x00\xdf\x7f\x9c\x00', 0x2b3)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
getrusage(0xffffffffffffffff, &(0x7f0000000140))

19:51:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x2c)

[ 1407.359208][T17856] validate_nla: 12 callbacks suppressed
[ 1407.359226][T17856] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1407.412626][T17859] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:59 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
uname(&(0x7f0000000040)=""/54)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
socket$bt_rfcomm(0x1f, 0x3, 0x3)

19:51:59 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)

19:51:59 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002002000f88000f01700", 0x2e}], 0x1}, 0x0)

19:51:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x2d)

[ 1407.771197][T17900] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1407.809005][   T25] audit: type=1800 audit(1572119519.564:558): pid=17864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17188 res=0
[ 1407.839112][T17953] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:51:59 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000009000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:51:59 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xb000000}, 0x0)

[ 1408.223760][T17988] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1408.245755][T17988] __nla_validate_parse: 12 callbacks suppressed
[ 1408.245776][T17988] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:00 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x400000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:00 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5})
setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000080)=0xffff, 0x4)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r6=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000})
sendto$inet(r3, &(0x7f0000000100), 0xfffffd77, 0x83733d379ec7f0b3, 0x0, 0x17)

19:52:00 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002004800f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x2e)

19:52:00 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xc000000}, 0x0)

19:52:00 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000a000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1408.703576][T18003] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1408.758510][T18003] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1408.777137][T18007] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1408.807140][T18007] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:00 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002004c00f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:00 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xd000000}, 0x0)

19:52:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x2f)

[ 1409.137339][   T25] audit: type=1800 audit(1572119520.894:559): pid=18030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17197 res=0
[ 1409.203350][T18121] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1409.220398][T18121] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:01 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000e000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:01 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xe000000}, 0x0)

19:52:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002006000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1409.575923][T18134] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1409.595920][T18134] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1409.642946][T18136] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1409.657635][T18136] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:01 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x4000000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:01 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
io_setup(0x4, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
io_pgetevents(r1, 0x3, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000200)={r2, r3+30000000}, &(0x7f00000002c0)={&(0x7f0000000280)={0x9}, 0x8})
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:01 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x30)

19:52:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002006800f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:01 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xf000000}, 0x0)

19:52:01 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000f000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1410.088832][T18152] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1410.128579][T18154] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:02 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x19000000}, 0x0)

[ 1410.222810][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1410.222844][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1410.228613][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1410.235330][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:52:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002006c00f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:02 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x1, 0x7fff, 0x1, 0x0, 0x62a55f8d582217c})
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000300)=0x2158, 0x2)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
gettid()
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
fsetxattr$security_selinux(r3, &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:init_exec_t:s0\x00', 0x21, 0x3)
select(0x40, &(0x7f0000000140)={0x3, 0x8, 0x8, 0x200, 0x8, 0x6, 0xcc9, 0x7}, &(0x7f0000000180)={0x80000000, 0x3, 0x71, 0x7, 0x1, 0x9, 0x6, 0x3}, &(0x7f00000001c0)={0x200, 0x9, 0x70, 0x8000, 0x2, 0x4, 0x1, 0x1}, &(0x7f0000000200)={0x77359400})
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r2, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000440)="0238a5c3d5d94e98afe44338eba0ddaa22c48118d3b497feaa19ca350e1baa8b04eb18d0cab1b965ad3815341ae1dec2437ac4f6384e44f0b5348db6232d63029e35da4451e67d387fb5269e196c0bc2be19ea592b772533c1b66f737b17ca7c774026699e4facd14119973c1851efaabdcbcf76d36567340b29b37a160023781b1cd32c9965bbdb3800e37d17c5ce890eb26519dbf94bd13f75f2370315f9455aff74b2b693fc", 0xa7, 0x4001, 0x0, 0x0)

[ 1410.406658][T18265] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:02 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x31)

[ 1410.529023][   T25] audit: type=1800 audit(1572119522.284:560): pid=18261 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17199 res=0
[ 1410.587200][T18271] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:02 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)

19:52:02 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000010000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:03 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x8000000000000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002007400f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:03 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x32)

19:52:03 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x48000000}, 0x0)

19:52:03 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8a6, 0x80000)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000140)="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", 0xfa, 0x40, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:03 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000011000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:03 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x4c000000}, 0x0)

19:52:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002007a00f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:03 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x33)

19:52:03 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
clone(0x10400, &(0x7f0000000140)="33e89100db07d67ca736330b1295f2edc15599a14a024e84f4f0217e2c345dfa99288789718375293f7902fa4b590451ead9e7a51238ed798225a6db70247664a881f67bad559d0f783ab54f4ec0fde3be98aeacfaeed7be", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)="acc39a5bec0e1d8eae7c0519")
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x2042c0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000440)={0x30, 0x5, 0x0, {0x0, 0x5, 0x2, 0x41758fb1}}, 0x30)
sendto$unix(r0, &(0x7f0000000040), 0x0, 0x40, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x1000000000, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000080)={0x3, 0x9, 0x1})
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
r6 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r6, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r7=>0x0})
r8 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r8, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r9=>0x0})
recvmmsg(r8, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r9+30000000})
getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000480)={'icmp6\x00'}, &(0x7f00000004c0)=0x1e)
recvmmsg(r6, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r7+30000000})
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x8000, 0x0)
sendto$inet(r6, &(0x7f0000000280)="dc17308aec1b3ff773ee60bed1382c3791bf0135fbd5751f81b3ee4b5828b8debaff9e043e530411a406bf6b9b7a25f4c0058a114c2612a38a741b69bc539bc94000000000000000aaf8e21a140e632df008000000000000003e19b459a57557758e7fdeb8ec0681c6cee0a2730e93828e05ea5550c417a26e942758a0b9e9fd92cec69e1a1db3b2a99d0305efb3dd5a299e1cfc6e9f1154717a8be4e11aa1de91afb7d5d1fbb2e1b88296e571af58a22b823f0c27c26487f5ab3dffd203bda8a6943f8291f251f5d547d0517800e1b876146f279749869340da2d9c23c0e7c34a779b0c59c229c46982df8eba43df179e404d4bc99c0b5b", 0x0, 0xce75ab6ebd09593e, 0x0, 0x3e)

19:52:03 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x60000000}, 0x0)

19:52:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000000020ec000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1412.146356][   T25] audit: type=1800 audit(1572119523.904:561): pid=18524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17187 res=0
19:52:04 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
getrusage(0xffffffffffffffff, &(0x7f0000000140))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040))
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f0000000080)=""/28, 0xf)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000200))

19:52:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x34)

19:52:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f00030003000000020af500f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:04 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000115a29000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:04 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:04 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x68000000}, 0x0)

[ 1412.692987][T18643] validate_nla: 11 callbacks suppressed
[ 1412.693004][T18643] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1412.753990][T18646] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000200f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:04 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0)

19:52:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x35)

[ 1413.066683][T18760] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:04 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
sendto(r1, &(0x7f0000000140)="fd21288f4b2a3e050a0cbfb1483b7bf8db614810e7c045bd20f0624f95345cc1a09dbf504f0a46a464bc0b01696463dc1d184e951bf9261483531c8065f5e912a091d1b60afca1b5632f18ed691c5d3349bad887ad5781daef7469641093d52f744f97cc2454f304b1a3f436c12940735016f17cb4a928a227da44eec018a8ccbc0b17ba0db4e7df3aba50e2", 0x8c, 0x8000, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x11}, 0x8}}, 0x80)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
sendto$unix(r3, &(0x7f0000000280)="46d22c2b46969ba20caf592ad5707139f1e2adf7d25f7f19c798943c09de2ed5f9e443", 0x23, 0x20000000, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1413.123132][T18763] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000300f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:05 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)

19:52:05 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000034000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1413.387154][T18773] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:05 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x36)

[ 1413.470557][T18773] __nla_validate_parse: 11 callbacks suppressed
[ 1413.470573][T18773] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1413.487805][T18776] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1413.503004][T18776] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000400f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:05 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000000, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000140)={0x6, &(0x7f0000000080)=[0x801d, 0x5, 0x7, 0x4, 0x1, 0x0]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r1, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000100)="dc", 0x1, 0x800, 0x0, 0x0)

[ 1413.913733][T18896] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1413.931774][T18896] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:05 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x0, 0x2}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:05 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

19:52:05 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x37)

19:52:05 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x220080)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000500f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1414.198030][   T25] audit: type=1800 audit(1572119525.954:562): pid=18894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17105 res=0
[ 1414.215018][T19007] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1414.293375][T19007] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1414.305118][T19010] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1414.313658][T19010] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:06 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000240000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:06 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x99060000}, 0x0)

[ 1414.383576][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1414.385414][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1414.389454][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1414.395216][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:52:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000600f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:06 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000040)="0c6cdb44343a96857f42d5dc2e1d9b3b1ccf39f2eee94b45164b0e6c6cfe9e1a", 0x20, 0x83733d379ec778bb, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
r3 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0xc0000)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0xfffffffffffffffc, 0x3, 0xd})
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080))

19:52:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x38)

[ 1414.622096][T19126] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1414.679878][T19126] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1414.739318][T19127] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:06 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

19:52:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000700f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1415.002835][T19209] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1415.118670][T19242] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1415.133330][   T25] audit: type=1800 audit(1572119526.894:563): pid=19171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17208 res=0
19:52:07 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x0, 0x4}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x39)

19:52:07 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
ftruncate(r0, 0x930000)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:07 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xc00e0000}, 0x0)

19:52:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000a00f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:07 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000005f000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1415.643284][T19259] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000e00f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:07 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

19:52:07 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
r2 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r3=>0x0})
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000})
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x78, [], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000140)=""/120}, &(0x7f0000000280)=0x78)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x1, 0x0, 0xfffb, 0xfffe, 0x2]}, 0xe)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x3a)

[ 1415.984239][   T25] audit: type=1800 audit(1572119527.744:564): pid=19367 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17229 res=0
19:52:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000f00f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:07 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000003e8000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:08 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x0, 0x4000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:08 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

19:52:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002004800f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x3b)

19:52:08 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000001f4000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002004c00f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:08 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

19:52:08 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1})
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000040))
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
r2 = accept(0xffffffffffffffff, &(0x7f0000000280)=@tipc=@id, &(0x7f0000000200)=0x80)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x5)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
r5 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x2, 0x2)
fallocate(r5, 0xc, 0x200000000008, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000140)={0x77, "c2ace9e2ed479a66f177349ed3788d659fc6c43148ebf4226b2dd7c6ff866331bbefeb7f10b3cb7c8b29d9684e9ae9e0cab6bd3eaabf11fc9c1090add95e2b1a88fa33f5fa33dfc6894c5acba6db2d5745748eb2c2725f6a6fdc23cea2b200a02a273f4c2bf476baf877f6749175b542b3a1afd56ddac9f74aa804b0268c831c"})
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
sendfile(r5, r0, &(0x7f0000000380), 0xbbb)
fallocate(r7, 0x0, 0x0, 0x2000002)
fallocate(r6, 0x0, 0x0, 0x10ffff)
ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000340))

19:52:09 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x3c)

19:52:09 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002006000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1417.479759][   T25] audit: type=1800 audit(1572119529.234:565): pid=19512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17241 res=0
19:52:09 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

19:52:09 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
fremovexattr(r1, &(0x7f0000000080)=@random={'security.', 'batadv0\x00'})
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x4000000, 0x0, 0x0)

[ 1417.780420][T19538] validate_nla: 12 callbacks suppressed
[ 1417.780436][T19538] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1417.863640][T19536] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:10 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x0, 0x1000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:10 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000002814000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x3d)

19:52:10 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x2)

19:52:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002006800f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:10 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778fb, 0x0, 0x0)

[ 1418.431658][T19651] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1418.461383][T19652] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1418.492869][T19652] __nla_validate_parse: 11 callbacks suppressed
[ 1418.492884][T19652] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:10 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x3)

19:52:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002006c00f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x3e)

[ 1418.822522][   T25] audit: type=1800 audit(1572119530.574:566): pid=19659 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17265 res=0
19:52:10 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x4)

[ 1418.945757][T19742] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:10 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000080000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1419.001715][T19742] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:10 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
shutdown(r1, 0x1)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8200, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), &(0x7f0000000140)=0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1419.078650][T19777] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1419.107273][T19777] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:11 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x0, 0x2000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002007400f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:11 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x5)

19:52:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x41)

19:52:11 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0)
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000340)=0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r2 = getpid()
rt_sigqueueinfo(r2, 0x32, &(0x7f0000000280)={0x24, 0x0, 0x3})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x400000000000, 0x3006)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x0, 0x7, 0x5, "98f48fd5c6466ca8331a1a1cd30dae967bd5f854b2bf107529a2ef6a16dd9b57ea51c321b8aa20c1b31df2c5fa285afcc9c6830e5bdf42b2bad237c84b3d9061", "ed03f557b824e15a48a3fb22156073b5239d3325c745d09399a60e0c8cc9a909a4dcb4e733ab06cec9d602805a8829143efb89e2181e4a065132905c38ac4f4b", "d885f596e7aab85077e64ad4c7257457d5808c3acb85fc1c6f7d309fa80e6a35", [0x6, 0xffff]})
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r4 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14)
r7 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r7, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r8=>0x0})
recvmmsg(r7, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r8+30000000})
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000580)={{{@in=@remote, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e20, 0x0, 0x4e23, 0x4, 0xa, 0x20, 0x60, 0x16, r6, r9}, {0xfffffffffffffff8, 0x200, 0x0, 0x1000, 0x1, 0x8000, 0x0, 0x1f}, {0x1, 0xfffffffffffffb23, 0x1, 0x400}, 0x6, 0x6e6bbc, 0x5, 0x2, 0x2}, {{@in=@multicast2, 0x4d2, 0xff}, 0x2, @in6=@remote, 0x3503, 0x3, 0x0, 0x0, 0x9, 0x9, 0xb92d}}, 0xe8)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r11, 0x0, 0x0, 0x2000002)
fallocate(r10, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11})
sendto$unix(r10, &(0x7f0000000040), 0x15, 0x0, 0x0, 0x2b2)
r12 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
sendto$inet(r12, &(0x7f0000000380)="dc", 0x1, 0x83733d379ec738bb, 0x0, 0x0)

19:52:11 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000010004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1419.812286][T19902] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1419.862498][T19902] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:11 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6)

19:52:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002007a00f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1420.037112][T19969] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1420.058229][T19969] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x42)

19:52:12 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x7)

[ 1420.353258][   T25] audit: type=1800 audit(1572119532.114:567): pid=20020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17278 res=0
[ 1420.401523][T20026] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1420.431731][T20026] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:12 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000020004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000003f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1420.785882][T20039] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1420.869289][T20039] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:12 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x0, 0x4000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:12 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x8)

19:52:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x43)

19:52:12 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
sendto$inet(r3, &(0x7f0000000040)="00ac7d98af971dc550dc7df60d52d18d5632e70be6eea123de448771c88a22c0b07673d7a623fb273c5955ed941cd57aee6646b58c2c4b06bb28bc50e4a9d3a9cb040bf08f7404fd190befcfa4b712b9a9956afde1156ae68e52b90a5d8f0ad33e2c7dc0b4867db411c9f42cfa", 0x0, 0x83733d379ec7f87b, 0x0, 0x0)

19:52:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000005f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:12 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000030004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1421.221389][T20052] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1421.282094][T20055] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:13 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x9)

19:52:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000006f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x44)

[ 1421.685461][T20172] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:13 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xa)

[ 1421.816825][   T25] audit: type=1800 audit(1572119533.574:568): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17297 res=0
19:52:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x45)

19:52:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000007f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:14 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000, 0x0, 0x0, 0x40000000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:14 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000040004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:14 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xb)

19:52:14 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0xb1327ee7949be717, &(0x7f0000000240)=0x1, 0x2f1)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200000af88000f01700", 0x2e}], 0x1}, 0x0)

19:52:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x46)

19:52:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200f50af88000f01700", 0x2e}], 0x1}, 0x0)

19:52:14 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xc)

19:52:14 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x6000})
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x47)

[ 1422.970376][T20324] validate_nla: 6 callbacks suppressed
[ 1422.970394][T20324] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1423.026172][T20321] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200000ef88000f01700", 0x2e}], 0x1}, 0x0)

19:52:14 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xd)

[ 1423.089416][   T25] audit: type=1800 audit(1572119534.844:569): pid=20313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17301 res=0
[ 1423.385296][T20437] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:15 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x24)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0xfffffffffffffd57, 0x69, 0x0, {0x0, 0x0, 0x6}}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
r2 = socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20)
close(r2)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
r4 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000640)="f4001100002b1125fe8000000000000005baa68754ba00e8c1344f3e62d76c27e80000410200000000000000", 0x2c}], 0x1}, 0x0)
io_setup(0x2, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
fadvise64(r4, 0x0, 0x7, 0x1)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000300)={0x19, 0x0, "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"})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:15 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000070004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:15 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x48)

19:52:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200c00ef88000f01700", 0x2e}], 0x1}, 0x0)

19:52:15 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xe)

19:52:15 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='squashfs\x00', 0x10000, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1423.841890][T20451] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1423.867964][T20451] __nla_validate_parse: 6 callbacks suppressed
[ 1423.867988][T20451] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1423.913299][T20455] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1423.922009][T20455] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200000ff88000f01700", 0x2e}], 0x1}, 0x0)

19:52:15 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xf)

19:52:15 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082abd7000fedbdf250a00000008000600010100003000010014000300fe800000000000000000000000f700bb080004004e2300000800080002000000080002001d0000000c00150008000800800000000800040006000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20008440)

19:52:15 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x49)

[ 1424.285255][T20571] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1424.309321][T20571] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:16 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x19)

19:52:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000020f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1424.619200][T20682] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1424.657145][T20682] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:16 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x4a)

19:52:16 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000090004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000048f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:16 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x48)

19:52:16 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x10001, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:16 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000000)=0x3, 0x4)
r3 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r5=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x3f}, 0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={<r6=>r5, 0x2cc7aff7, 0x6, 0xaa}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r6, 0xffff}, &(0x7f00000001c0)=0x8)
write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1425.208912][T20699] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1425.228235][T20699] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1425.255641][T20702] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1425.291743][T20702] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:17 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x4c)

19:52:17 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x4b)

19:52:17 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x8000000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r6], 0x2}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r8, 0x0, 0x0, 0x2000002)
fallocate(r7, 0x0, 0x0, 0x10ffff)
accept(0xffffffffffffffff, &(0x7f0000000440)=@nl=@proc, &(0x7f00000003c0)=0x80)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="74978ca501000000978b00010000000018190000", @ANYRES32=r3, @ANYRES16=r4], &(0x7f0000000180)='syzkaller\x00', 0x200, 0xa4, &(0x7f0000000280)=""/164, 0xc2f00, 0x3, [], r6, 0x16, r7, 0x8, &(0x7f00000001c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x4, 0x6, 0x2}, 0x10}, 0x70)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r9 = socket(0x11, 0xa, 0x8)
setsockopt$inet_tcp_int(r9, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r1, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200004cf88000f01700", 0x2e}], 0x1}, 0x0)

[ 1425.590534][T20817] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1425.632921][T20817] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1425.694883][T20823] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1425.732958][   T25] audit: type=1800 audit(1572119537.484:570): pid=20818 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17314 res=0
19:52:17 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x60)

19:52:17 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000000000a0004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:17 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x4c)

19:52:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000060f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1426.012135][T20929] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:17 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000140), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x400000)
write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1426.167257][T20937] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:18 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x68)

[ 1426.302912][    C0] protocol 88fb is buggy, dev hsr_slave_0
19:52:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000068f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:18 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6c)

19:52:18 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x4d)

19:52:18 executing program 0:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x240000, 0x80)
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000080)={0x8, 0x0, 0xfffffe01})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe0dec6c7d6aadc99, 0x80010, r1, 0xcfb06000)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r1, &(0x7f0000000280)="f4cc594a0c9c96be5c69cbdeed6bd264600447156765ee3c01953ce98b05a6560cd2a3e146c1e408ef8f7ccaf46ad647147dfae1de4e1aa92f71ef892475e42143a9181504a3a0ec935f04a780ff312b32d305c83e0f2ae8b3a74d772dac9b3a45f3550c5369cfb1a250768918896d5b5dc28ce9916f0dc2460c204061ced09dddead5cf53a9b0c05e1f5f437311a4d3aad6cfc1b7d8c7f768d51b03bcb9f7de223878b4770529f7bf76b3ca39b848631540db11e52961c3a6ae1c01f3a026afe4c9a8436e70ad5b18a08a85f6f51b08b3f155e776efbe2f13ef0203fff3b306cb603792a3a946b67c14c743ce54d58a1f0020802d393da5266e151ad3297ff7cf8830a9a3d2559892b73d8d46fd8d2d201605e58aa091e950fdd2ecab6606826a535a87f109b94239986cadbad8", 0x12e, 0x40002072, 0x0, 0x0)

19:52:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200006cf88000f01700", 0x2e}], 0x1}, 0x0)

19:52:18 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000000000e0004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:18 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0))
r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$setperm(0x5, r2, 0x4001023)
keyctl$chown(0x4, r2, 0x0, 0x0)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="e61cf976e677bc62a729dd1e84f4dfec939ca952e16d42b695f91795bfa0ae", 0x1f, r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000074f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:18 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x74)

19:52:18 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r1 = socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:18 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x4e)

19:52:19 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x7a)

19:52:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200007af88000f01700", 0x2e}], 0x1}, 0x0)

[ 1427.466147][   T25] audit: type=1800 audit(1572119539.224:571): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17322 res=0
19:52:19 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r1 = inotify_init()
r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000080)={0x8, 0x6})
dup2(r0, r2)
fcntl$getown(r1, 0x9)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r3 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x3, 0xffffffffffffffff)
getsockname$unix(r5, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x200000002, 0x0)
r6 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r6, 0xc0487c04, &(0x7f0000000000)=""/226)
bind$inet(r6, 0x0, 0x24d)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x3, 0xffffffffffffffff)
splice(r7, 0x0, r8, 0x0, 0x400, 0xb)
add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

19:52:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000000000f0004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:19 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x300)

19:52:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000ec0f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:19 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x4f)

[ 1427.976678][T21398] validate_nla: 11 callbacks suppressed
[ 1427.976694][T21398] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1428.017720][   T25] audit: type=1800 audit(1572119539.774:572): pid=21178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17235 res=0
[ 1428.069693][T21418] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:20 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x500)

19:52:20 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountstats\x00')
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x80000001, @local, 0x480}}, 0x0, 0x0, 0x0, "86b96d070014156bcdac86d258ac9d1d6e1bba3b76e0884da026de774234aec28eac4ff961255ceb975cff1678e6b1a79e082ac863bc20e7c7690cbfbfa7cc002572bcca7ca36aef95f1cab744e7a340"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000af5f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:20 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x50)

19:52:20 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004c80)=[{{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/177, 0xb1}, {&(0x7f0000000940)=""/118, 0x76}], 0x6, &(0x7f00000008c0)=""/67, 0x43}, 0x3}, {{&(0x7f0000004e80)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001080)=[{&(0x7f00000009c0)=""/146, 0x92}, {&(0x7f0000000a80)=""/209, 0xd1}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000c80)=""/243, 0xf3}, {&(0x7f0000000d80)=""/126, 0x7e}, {&(0x7f0000000e00)=""/135, 0x87}, {&(0x7f0000000ec0)=""/36, 0x24}, {&(0x7f0000000f00)=""/249, 0xf9}, {&(0x7f0000001000)=""/116, 0x74}], 0x9, &(0x7f0000001140)=""/200, 0xc8}}, {{&(0x7f0000002280)=@tipc, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002300)=""/94, 0x5e}, {&(0x7f0000002380)=""/125, 0x7d}, {&(0x7f0000002400)=""/207, 0xcf}, {&(0x7f0000002500)=""/251, 0xfb}, {&(0x7f0000002600)=""/196, 0xc4}, {&(0x7f0000002700)=""/154, 0x9a}, {&(0x7f00000027c0)=""/18, 0x12}, {&(0x7f0000002800)=""/129, 0x81}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/210, 0xd2}], 0xa, &(0x7f0000002b80)=""/88, 0x58}, 0x8}, {{&(0x7f0000002c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002a40)=""/5, 0x5}, {&(0x7f0000002c80)=""/147, 0x93}, {&(0x7f0000002d40)=""/126, 0x7e}, {&(0x7f0000002dc0)=""/190, 0xbe}, {&(0x7f0000002e80)=""/250, 0xfa}], 0x5}, 0x3}, {{&(0x7f0000003000)=@tipc=@name, 0x80, &(0x7f0000004280)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/62, 0x3e}, {&(0x7f00000040c0)=""/235, 0xeb}, {&(0x7f00000041c0)=""/180, 0xb4}], 0x4, &(0x7f00000042c0)=""/150, 0x96}, 0x2}, {{&(0x7f0000004380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004400)=""/195, 0xc3}, {&(0x7f0000004500)=""/180, 0xb4}, {&(0x7f00000045c0)=""/119, 0x77}, {&(0x7f0000004640)=""/103, 0x67}], 0x4, &(0x7f0000004700)=""/166, 0xa6}, 0x2}, {{&(0x7f00000047c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/158, 0x9e}, {&(0x7f0000004900)=""/64, 0x40}, {&(0x7f0000004940)=""/65, 0x41}, {&(0x7f00000049c0)=""/30, 0x1e}], 0x4}}, {{&(0x7f0000004a40)=@nl=@proc, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004ac0)=""/251, 0xfb}, {&(0x7f0000004bc0)=""/110, 0x6e}], 0x2, 0xffffffffffffffff}, 0x7fffffff}], 0x8, 0x0, &(0x7f0000002a80)={0x0, r1+30000000})
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
r3 = add_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="0bc71400d8d7cde7b54c34a0c3601289c7960c30602c8f439f87e07d2ed00df404e2afc3b97048d3f06e20bacc0eef5647d83bd2a1d623bf92b0bb36e6c2300f76000923bbc76041d9ae86e10e2b9049336053e9dec7fb", 0x57, 0xfffffffffffffffa)
r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$setperm(0x5, r4, 0x4001023)
keyctl$chown(0x4, r4, 0x0, 0x0)
keyctl$reject(0x13, r3, 0x3, 0x9, r4)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffcde)
r5 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r6=>0x0})
recvmmsg(r5, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000})
fcntl$setstatus(r5, 0x4, 0x3ebfe)
io_setup(0x2, &(0x7f00000004c0)=<r7=>0x0)
r8 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r8, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r9=>0x0})
recvmmsg(r8, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r9+30000000})
r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x200, 0x0)
r11 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r11, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r11, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r12=>0x0})
recvmmsg(r11, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r12+30000000})
io_submit(r7, 0x2, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000200)="99079a6a0e6dc12020efcc87f7745160a9ce76d178b86e7066653a7e7849871285a5341fea4476a62c05902fb12f491f6bbc59799d2cee1547facfd9", 0x3c, 0xfffffffffffffff8, 0x0, 0x0, r10}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7c870e83cfddd67e, 0x100, r11, &(0x7f0000000300)="bf16e6b2313e1e2ec95bc0b02df1d54ccdc33c3ea7f24cc3b0d10b127a8545815db2168754ca5ffb222c956002ce271e189034777103581b8fb66b41aefebf8ae6044a369da958d5af4ed6e042b06ec6f972d39a5262c8c0c51b7f616f08819cfa587b06f50cb25cd698b2e23db1532a0f66db50fe811a95bc8efdc23c4844f55de0e90998d9e4e9e3952b5a3391", 0x8e, 0x1ff, 0x0, 0x3}])
r13 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r13, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r13, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r14=>0x0})
recvmmsg(r13, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r14+30000000})
r15 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r15, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r15, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r16=>0x0})
recvmmsg(r15, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r16+30000000})
splice(r15, 0x0, r13, 0x0, 0x4000004, 0x6)

19:52:20 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000100004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1428.506792][T21433] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1428.532454][T21434] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000002f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:20 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x600)

19:52:20 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x51)

[ 1428.981400][T21550] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1429.019400][T21550] __nla_validate_parse: 12 callbacks suppressed
[ 1429.019419][T21550] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1429.053438][T21551] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1429.075291][T21551] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:20 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x699)

19:52:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000003f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1429.285684][   T25] audit: type=1800 audit(1572119541.044:573): pid=21553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17227 res=0
19:52:21 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x52)

19:52:21 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000110004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x700)

[ 1429.485024][T21564] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1429.510341][T21564] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:21 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000d06000)=0x1, 0xffffffffffffff23)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b7ace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f88"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xc0, &(0x7f0000000280)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
shutdown(r0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r2}, 0xc)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc)

19:52:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000004f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1429.811253][T21580] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1429.844651][T21580] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1429.890004][T21685] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1429.977403][T21685] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:21 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x53)

19:52:21 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='\xff\xfe\xff\xff\xfc\x01\x00\x01\x00\x02\xd8\x00\x00\x00#\x00', 0xfffffffffffffe69)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x900)

19:52:21 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x240000, 0x0)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./bus\x00', 0x6, 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000005f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1430.145163][   T25] audit: type=1800 audit(1572119541.904:574): pid=21684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17334 res=0
[ 1430.215164][T21693] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1430.270413][T21693] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:22 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000000115a290004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:22 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f000000a0c0)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/108, 0x6c}], 0x1, &(0x7f0000000280)=""/222, 0xde}, 0x9}, {{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001480)=""/204, 0xcc}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/32, 0x20}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000002600)=""/21, 0x15}, 0x100}, {{&(0x7f0000002640)=@ax25={{0x3, @rose}, [@remote, @remote, @rose, @rose, @bcast, @null, @default]}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000026c0)=""/135, 0x87}, {&(0x7f0000002780)=""/62, 0x3e}], 0x2, &(0x7f0000003ac0)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000002880)=""/223, 0xdf}, {&(0x7f000000a380)=""/82, 0x52}, {&(0x7f0000006ac0)=""/239, 0xef}], 0x5, &(0x7f000000a2c0)=""/141, 0x8d}, 0x1}, {{&(0x7f0000006c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000008380)=[{&(0x7f0000006cc0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/134, 0x86}, {&(0x7f0000007d80)=""/200, 0xc8}, {&(0x7f0000007e80)=""/159, 0x9f}, {&(0x7f0000007f40)=""/196, 0xc4}, {&(0x7f0000008040)=""/2, 0x2}, {&(0x7f0000008080)=""/70, 0x46}, {&(0x7f0000008100)=""/72, 0x48}, {&(0x7f0000008180)=""/228, 0xe4}, {&(0x7f0000008280)=""/234, 0xea}], 0xa, &(0x7f000000a400)=""/98, 0x55}, 0x8001}, {{&(0x7f00000084c0)=@caif=@rfm, 0x80, &(0x7f0000009700)=[{&(0x7f0000008540)=""/100, 0x64}, {&(0x7f00000085c0)=""/4096, 0xfffffffffffffd7b}, {&(0x7f00000095c0)=""/63, 0x3f}, {&(0x7f0000009600)=""/95, 0x5f}, {&(0x7f0000009680)=""/80, 0x50}], 0x5, &(0x7f0000009780)=""/3, 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000009b00)=[{&(0x7f00000097c0)=""/173, 0xad}, {&(0x7f0000009880)=""/191, 0xbf}, {&(0x7f0000009940)=""/170, 0xaa}, {&(0x7f0000009a00)=""/254, 0xfe}], 0x4, &(0x7f0000009b40)=""/218, 0xda}, 0x600000}, {{&(0x7f0000009c40)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000009f80), 0x0, &(0x7f0000009fc0)=""/201, 0xc9}, 0x4}], 0x8, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000440)={'raw\x00', 0x1000, "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"}, &(0x7f0000000040)=0x1024)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1430.361778][T21803] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:22 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xa00)

19:52:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x54)

19:52:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000006f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1430.731311][T21917] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:22 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
gettid()
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1430.814333][T21921] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:22 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xb00)

19:52:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000007f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x55)

[ 1431.157954][T21942] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:23 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), 0xfffffffffffffe59)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='9de\x88\x00', 0x2000, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0xb0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000001, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x2}}, 0x20)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000200))
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x171)
write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x3, {0x628a, 0x5, "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", 0x40, 0x9, 0x8d, 0x0, 0x0, 0x4, 0x5, 0x1}, r4}}, 0x128)

[ 1431.293498][   T25] audit: type=1800 audit(1572119543.054:575): pid=21918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17334 res=0
19:52:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200000af88000f01700", 0x2e}], 0x1}, 0x0)

19:52:23 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xc00)

19:52:23 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000340004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x56)

19:52:23 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0xffffffffffffff4f}, 0xfffffcde)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000000)=[0x6eb78fa0, 0x4, 0x10000], 0x3, 0xe95, 0x80000001, 0x3f, 0x5, 0x1, {0x2, 0x7ff, 0x1, 0x80, 0x7, 0x8, 0xdc, 0x7b4, 0xb9b, 0x7, 0x2, 0xc0, 0x0, 0x2, "42f47b02a9f29d51e4a3623f601effadfb23ef6ae08a975ab3e049069d7eb273"}})
r4 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x40, 0x0, 0xc9)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
r6 = socket$rds(0x15, 0x5, 0x0)
fsetxattr$security_smack_entry(r6, &(0x7f0000000240)='security.SMACK64IPOUT\x00', &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 0x48, 0x2)
recvmmsg(r4, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
fcntl$setstatus(r4, 0x4, 0x0)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000280))
io_setup(0x2, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000100)="704d8f02c5f4615ae85310da2ecf2c4182d54c340d12d1e45d9fdca5adb11b21f7d41d766fac3d9b8c8daf23095db8b98b44486e5ad9523b20dbd76f1bef476eda467f905bed4269b8f519cdfb4ab799bceb6e71fe25517d5fcd00af626bf4f7bad57342cc69232e2087ac5bd406f20a7e17c2fef0470aaecb4a6dac1f9018130deb22cabe6e4415a9f9eaf28908273fab3b633da8ef051990b6355e2cd4bd7beb1d301d01be5667accd35d35d", 0xad}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:23 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x9)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000240)=0x4003, 0x0)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:23 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xd00)

19:52:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200000ef88000f01700", 0x2e}], 0x1}, 0x0)

19:52:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x57)

19:52:24 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xe00)

19:52:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200000ff88000f01700", 0x2e}], 0x1}, 0x0)

[ 1432.212659][   T25] audit: type=1800 audit(1572119543.964:576): pid=22162 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17409 res=0
19:52:24 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000002400004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:24 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xec0)

19:52:24 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(r0, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1})
ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x4)
getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000040)=""/107, &(0x7f0000000140)=0x6b)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000048f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x58)

[ 1432.773406][   T25] audit: type=1800 audit(1572119544.534:577): pid=22294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17235 res=0
19:52:24 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000001180), &(0x7f0000001280)=0x4)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x1001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000012c0)={0xff80000, {{0xa, 0x4e23, 0xfffffff7, @mcast1, 0xab}}}, 0x88)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000180))
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f0000000100)=0x4)
recvmmsg(r3, &(0x7f0000003c40)=[{{&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000003e80)=""/4111, 0x100f}], 0x1, &(0x7f0000000300)=""/162, 0xa2}, 0x800}, {{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000640)=""/133, 0x85}], 0x2}, 0x1f}, {{&(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000700)=""/128, 0x80}], 0x1}, 0x2000000}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000800)=""/241, 0xf1}], 0x1, &(0x7f0000000900)=""/222, 0xde}, 0x9}, {{&(0x7f0000000a00)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/226, 0xe2}, {&(0x7f0000000b80)=""/93, 0x5d}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x3, &(0x7f0000000c40)=""/240, 0xf0}, 0x7}, {{&(0x7f0000000d40)=@caif=@rfm, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)=""/114, 0x72}, {&(0x7f0000000e40)=""/207, 0xcf}, {&(0x7f0000000f40)=""/71, 0x47}], 0x3, &(0x7f0000001000)=""/124, 0x7c}, 0x80}, {{&(0x7f0000001080)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000001100)=""/109, 0x6d}], 0x1}, 0x5}, {{&(0x7f00000011c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002280)=""/191, 0xbf}, {&(0x7f0000002340)=""/187, 0xbb}, {&(0x7f0000002400)=""/238, 0xee}, {&(0x7f0000002500)=""/177, 0xb1}], 0x4, &(0x7f0000002600)=""/114, 0x72}, 0x7}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000002680)=""/97, 0x61}, {&(0x7f0000002700)=""/122, 0x7a}, {&(0x7f0000002780)=""/203, 0xcb}, {&(0x7f0000002880)=""/249, 0xfffffffffffffc77}, {&(0x7f0000002980)=""/217, 0xd9}, {&(0x7f0000003ac0)=""/153, 0x99}], 0x6, &(0x7f0000003c00)=""/28, 0x1c}, 0x234c}], 0x9, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4)

19:52:24 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xf00)

19:52:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200004cf88000f01700", 0x2e}], 0x1}, 0x0)

19:52:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x59)

19:52:24 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x1c, 0x9, 0x5, 0xe, 0x3, 0x3, 0x1, 0x265, 0x40, 0x223, 0x0, 0xfffd, 0x38, 0x2, 0x320, 0x4, 0x7876}, [{0x5, 0xc3, 0x4, 0xaf77, 0x6, 0x4, 0x4, 0x1}], "a525f1c13d232454b87bfd85c03f407e386ac4d0398b1b35f9e53e28fbad637eb9408e8b56fca22574773f3ac36e2d2766c8c2e445ec211f1583ef7a2850", [[], [], []]}, 0x3b6)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1433.237594][T22413] validate_nla: 13 callbacks suppressed
[ 1433.237610][T22413] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:25 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000000005f0004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1433.306463][T22417] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1433.342820][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1433.348687][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1433.354561][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1433.360503][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:52:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000060f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:25 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x1900)

19:52:25 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xc4240, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffcde)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r3=>0x0)
r4 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
listen(r4, 0x200)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa)

19:52:25 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x5a)

19:52:25 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4)
preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/166, 0xa6}], 0x7, 0x0)

[ 1433.712045][T22537] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1433.743398][T22538] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:25 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x2000)

19:52:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000068f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1433.969889][   T25] audit: type=1800 audit(1572119545.724:578): pid=22536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16658 res=0
19:52:25 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x6, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0)
connect$nfc_llcp(r1, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x7, 0x6, 0x3f, "6ce78430cf3604f837684ef35387ede5070f99cc1e604038f45a6e8893508bb91c013ebc812a263a3d9315a4b87081f4fe766baad05c11100f5f79bd3b58dc", 0x5}, 0x60)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1434.124893][T22657] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:25 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000003e80004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1434.173455][T22657] __nla_validate_parse: 13 callbacks suppressed
[ 1434.173502][T22657] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:26 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x5b)

[ 1434.236160][T22661] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1434.271507][T22661] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:26 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x4800)

19:52:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200006cf88000f01700", 0x2e}], 0x1}, 0x0)

19:52:26 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40, 0x0)
accept$inet6(r1, &(0x7f0000000080), &(0x7f0000000140)=0x1c)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1434.561637][T22773] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1434.607497][T22773] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1434.681354][T22777] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:26 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x5c)

[ 1434.732950][T22777] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1434.817376][   T25] audit: type=1800 audit(1572119546.574:579): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16721 res=0
19:52:26 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="aefdda9d240000005a90f57f07703aeff0f64ebbf3e0dd761cf802f1452b4902866cebeeb44e65d766a83cf89441cb69", 0x30}, {&(0x7f0000000240)="a352be6dd62b96aa1d484e24002300a84d4583671e120755272bb736be94f980630600007704a71e023a276f7c0f36e1b69b4aae76822ddbcd6b49231f94ac927fff86a9eda650980804af2548034ac470478f7f09cfbefe", 0x58}], 0x2)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
flistxattr(r4, &(0x7f0000000040)=""/13, 0xd)

19:52:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000074f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:26 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x4c00)

19:52:26 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000001f40004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:26 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:26 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x5d)

[ 1435.350441][T22907] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000300030000000200007af88000f01700", 0x2e}], 0x1}, 0x0)

[ 1435.401512][T22907] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1435.422879][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1435.428838][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1435.434701][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1435.440491][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:52:27 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101140, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0xc, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r6=>0x0})
recvmmsg(r5, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r7=>0x0})
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000200)={@multicast1, @dev={0xac, 0x14, 0x14, 0x19}, r7}, 0xc)

19:52:27 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6000)

[ 1435.683680][T23019] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:27 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x5e)

[ 1435.727629][   T25] audit: type=1800 audit(1572119547.484:580): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17342 res=0
[ 1435.729989][T23019] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:27 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000ffffffff0004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1435.917238][T23060] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:27 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6800)

[ 1436.248005][T23137] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x5f)

19:52:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88002f01700", 0x2e}], 0x1}, 0x0)

19:52:28 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x310003, 0x0)
sendto$inet(r0, &(0x7f0000000100)='\x00', 0xfffffffffffffd77, 0x83733d37bec3f1bb, 0x0, 0x0)

19:52:28 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6c00)

19:52:28 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000ffffffffffffffff0004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1436.721158][T23198] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:28 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0xfffffeca)
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2)
r1 = accept(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x80)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000140)=0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1436.769131][T23217] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:28 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000480)={0x5, 0x9, 0x2, 0x40800, <r7=>r0})
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0xffff, 0x14}, 0xc)
r9 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r9, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r10=>0x0})
recvmmsg(r9, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r10+30000000})
r11 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r11, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r11, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r12=>0x0})
recvmmsg(r11, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r12+30000000})
r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0)
r14 = clone3(&(0x7f0000000b00)={0x20100000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), 0x3f, 0x0, &(0x7f00000009c0)=""/31, 0x1f, &(0x7f0000000a00)=""/217}, 0x40)
getresuid(&(0x7f0000000b40)=<r15=>0x0, &(0x7f0000000b80), &(0x7f0000000bc0))
r16 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0x4a6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r20=>0x0}, &(0x7f0000cab000)=0xc)
getresgid(&(0x7f0000000600)=<r21=>0x0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r16, &(0x7f00000006c0)={0x330, 0x0, 0x5, [{{0x5, 0x0, 0xb4, 0x7, 0x5, 0x1000, {0x5, 0x25e, 0x9, 0x100000001, 0x80000001, 0x7ff, 0x1, 0x4, 0x10000, 0x7fffffff, 0x0, r17, r18, 0x3, 0x1}}, {0x1, 0x4e6, 0x10, 0x1, 'veth1_to_bridge\x00'}}, {{0x2, 0x2, 0xbcb, 0x7ff, 0x401, 0xfffffffa, {0x0, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x2, 0x400, 0x5, r19, 0x0, 0x3ff, 0x2}}, {0x0, 0x7, 0x0, 0xff}}, {{0x4f6c7e78, 0x0, 0x0, 0x0, 0xd3cd, 0x5, {0x5, 0x7f, 0x2, 0x286b, 0x100000001, 0x26, 0x6, 0xba2b, 0x3f, 0x0, 0x0, r20, 0x0, 0x83, 0x5}}, {0x0, 0x0, 0x0, 0x800}}, {{0x1, 0x3, 0x3, 0x3, 0x10001, 0x0, {0x6, 0x442a, 0x0, 0x3, 0x9, 0x401, 0xb79, 0x3, 0x5, 0x0, 0x81, 0xee01, r21, 0x2, 0x82cd}}, {0x0, 0xfffffffffffffc00, 0x8, 0xfffffff8, '/lonodev'}}, {{0x0, 0x2, 0x0, 0x0, 0x3, 0xfffffff9, {0x5, 0x6, 0x3000, 0x4, 0x4, 0x6, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x4782}}, {0x5, 0x7ff, 0x10, 0x5, 'veth1_to_bridge\x00'}}]}, 0x330)
r22 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r22, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r22, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r23=>0x0})
recvmmsg(r22, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r23+30000000})
r24 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r25 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r25, 0x0, 0x0, 0x2000002)
fallocate(r24, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r24, 0xc028660f, &(0x7f0000000040)={0x0, r25})
r26 = accept$ax25(r25, &(0x7f0000000c00)={{0x3, @netrom}, [@null, @rose, @netrom, @null, @default, @rose, @rose, @bcast]}, &(0x7f0000000c80)=0x48)
r27 = getpid()
syz_open_procfs(r27, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002180)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000002280)=0xe8)
getresgid(&(0x7f00000022c0)=<r29=>0x0, &(0x7f0000002300), &(0x7f0000002340))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002380)=<r30=>0x0)
r31 = socket(0xa, 0x80001, 0x0)
getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, <r32=>0x0}, &(0x7f0000b34ffc)=0xc)
setuid(r32)
r33 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
r34 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r35 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r35, 0x0, 0x0, 0x2000002)
fallocate(r34, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r34, 0xc028660f, &(0x7f0000000040)={0x0, r35})
getsockopt$inet6_IPV6_IPSEC_POLICY(r34, 0x29, 0x22, &(0x7f0000002500)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r36=>0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r37=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r38=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0x4a6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r39=>0x0}, &(0x7f0000cab000)=0xc)
getresgid(&(0x7f0000000600)=<r40=>0x0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r33, &(0x7f00000006c0)={0x330, 0x0, 0x5, [{{0x5, 0x0, 0xb4, 0x7, 0x5, 0x1000, {0x5, 0x25e, 0x9, 0x100000001, 0x80000001, 0x7ff, 0x1, 0x4, 0x10000, 0x7fffffff, 0x0, r36, r37, 0x3, 0x1}}, {0x1, 0x4e6, 0x10, 0x1, 'veth1_to_bridge\x00'}}, {{0x5, 0x2, 0xbcb, 0x7ff, 0x401, 0xfffffffa, {0x0, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x2, 0x400, 0x5, r38, 0x0, 0x3ff, 0x2}}, {0x0, 0xfffffffffffffffe, 0x0, 0xff}}, {{0x4f6c7e78, 0x0, 0x0, 0x0, 0xd3cd, 0x5, {0x5, 0x7f, 0x2, 0x286b, 0x1, 0x26, 0x6, 0xba2b, 0x3f, 0x0, 0x0, r39, 0x0, 0x83, 0x5}}, {0x0, 0x0, 0x0, 0x800}}, {{0x1, 0x3, 0x3, 0x3, 0x10001, 0x0, {0x6, 0x442a, 0x0, 0x3, 0x9, 0x401, 0xb79, 0x3, 0x5, 0x0, 0x81, 0xee01, r40, 0x2, 0x82cd}}, {0x0, 0xfffffffffffffc00, 0x8, 0xfffffff8, '/lonodev'}}, {{0x0, 0x2, 0x0, 0x0, 0x3, 0xfffffff9, {0x5, 0x6, 0x3000, 0x4, 0x4, 0x6, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x4782}}, {0x5, 0x7ff, 0x10, 0x5, 'veth1_to_bridge\x00'}}]}, 0xfffffe73)
getgroups(0x3, &(0x7f00000023c0)=[0xee00, <r41=>r37, 0xffffffffffffffff])
r42 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r42, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r42, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r43=>0x0})
recvmmsg(r42, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r43+30000000})
r44 = socket$netlink(0x10, 0x3, 0x14)
r45 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r45, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r45, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r46=>0x0})
recvmmsg(r45, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r46+30000000})
r47 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r47, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r47, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r48=>0x0})
recvmmsg(r47, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r48+30000000})
r49 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r49, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r49, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r50=>0x0})
recvmmsg(r49, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r50+30000000})
r51 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004a00)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r52 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r52, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r52, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r53=>0x0})
recvmmsg(r52, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r53+30000000})
r54 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r54, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r55=>0x0})
recvmmsg(r54, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r55+30000000})
r56 = getpid()
syz_open_procfs(r56, 0x0)
r57 = socket(0xa, 0x80001, 0x0)
getsockopt$sock_cred(r57, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, <r58=>0x0}, &(0x7f0000b34ffc)=0xc)
setuid(r58)
r59 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r60=>0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r61=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r62=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0x4a6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r63=>0x0}, &(0x7f0000cab000)=0xc)
getresgid(&(0x7f0000000600)=<r64=>0x0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r59, &(0x7f00000006c0)={0x330, 0x0, 0x5, [{{0x5, 0x0, 0xb4, 0x7, 0x5, 0x1000, {0x5, 0x25e, 0x9, 0x100000001, 0x80000001, 0x7ff, 0x1, 0x4, 0x10000, 0x7fffffff, 0x0, r60, r61, 0x3, 0x1}}, {0x1, 0x4e6, 0x10, 0x1, 'veth1_to_bridge\x00'}}, {{0x2, 0x2, 0xbcb, 0x7ff, 0x401, 0xfffffffa, {0x0, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x2, 0x400, 0x5, r62, 0x0, 0x3ff, 0x2}}, {0x0, 0x7, 0x0, 0xff}}, {{0x4f6c7e78, 0x0, 0x0, 0x0, 0xd3cd, 0x5, {0x5, 0x7f, 0x2, 0x286b, 0x100000001, 0x26, 0x6, 0xba2b, 0x3f, 0x0, 0x0, r63, 0x0, 0x83, 0x5}}, {0x0, 0x0, 0x0, 0x800}}, {{0x1, 0x3, 0x3, 0x3, 0x10001, 0x0, {0x6, 0x442a, 0x0, 0x3, 0x9, 0x401, 0xb79, 0x3, 0x5, 0x0, 0x81, 0xee01, r64, 0x2, 0x82cd}}, {0x0, 0xfffffffffffffc00, 0x8, 0xfffffff8, '/lonodev'}}, {{0x0, 0x2, 0x0, 0x0, 0x3, 0xfffffff9, {0x5, 0x6, 0x3000, 0x4, 0x4, 0x6, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x4782}}, {0x5, 0x7ff, 0x10, 0x5, 'veth1_to_bridge\x00'}}]}, 0x330)
r65 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
r66 = syz_open_dev$amidi(&(0x7f0000004a40)='/dev/amidi#\x00', 0x5, 0x4000c2)
sendmmsg$unix(r3, &(0x7f0000004b00)=[{&(0x7f0000000000)=@file={0x3, './bus\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000100)="b3e5f93b639c00a7d3b875910036a4ef6cf5e58898cf792ec42f916637d32eb995099406d44af30091842057e3d0e11943761753dff3247f1b669ceeab0e04dd2207b5ae8152fa23ed1b243432fd92836a8911d43e6476ac8f99970993e2fe45fe3dea290488a5a9c47d697ac9ca6cca230df0891a5e5c694e17d2cd2fbfba38021cd7256288ab1de74111736e4cf3a6c31ca146e5d0aa4c180c9ad4a4d63c002eba676fa41ef80f1af45255368dc983edb66ce3d09cf31116b7707b5f891cdc8b27ac2b4dacb269726ce9e12d4c1ab9b19b", 0xd2}, {&(0x7f0000000200)="2f1968ff1b0c95b6bb449cb1cd7ff808a2f6377d40b48c1a6ebf97bb52ddb522d7674fa0b1e6b69eb599183440f06dbbfe1590264cbc9f1166a6790c7640465409721be2e2c3c44b84315572290e5aeb12f70099ac8ed82f596d62346ef217ce0ac659c9b03871d27e2e538802d05e370664eaf269e73a66d7f31a77a3b1444f1a8fdbd8e3e21e8bd8558d699ecbe16569ce", 0x92}, {&(0x7f0000000300)="496a2578b5dc7bdeaf6a3111208ea15d9aff6f63cfed1f16787a12875c7e64dbcd773533fc5594631d0670330663d22dc07c2c20f3089f407e903e1261b15ee2c0bf", 0x42}, {&(0x7f0000000380)="8d0e069068f04f3be342ad3fb8a6054aef4c266462ec0c35bd4480e7669d9de9201a4981e7680030251171c422bbf72623f69a38019bfe938bf99bd6f5c267840f893d817a5027b72caba17775b43e41c2dad9e02b04e62c6967cd8f619913eb9b3e33cb58590001cd2a9a86c21360f6d93ee3d0b32126470158d719bc399cb543232c1bb1ba525a002479638f2077da71a73ee3f07c0305f7edd6c7e1", 0x9d}, {&(0x7f0000000640)="50dd58f8c7cdee0d4433e2584bdf76a9a70070de14e14fc162944e75e2552fc8c1834e2764b0df989373fea9803d53314ae50fe484b52412b213c2b57dd0517c1264366a586d370778e501c979863a111e5d49129e586b56f37ff761f27abea35d91b115bcf4b5bef14af5eb54a2f77f9bcaf82f95f195f90060ab28088213d06efc3caf7fc1487683d4174d162658d5ec3cf16ee46f141d176723e4", 0x9c}, {&(0x7f0000000700)="9dea4097e01dd1454bab97946f7accff68b2caf0ac26984937d120fef7ad027dc12f7847bdb1c8f8f74221d849eeeab6f077c2ea5f18040b697339147cb30e2e19a875a6a563e23a8f471c656ccf787e396711a3252454b089d740d9057efddf0f96c384f306c8e453a6a9d38c65961797d091cec6b4c6e27e3390ef816ab285efb51d41b7321d536aa4455812c06687853aeb91a81276a8df313f01d7d8daabb665b9d826b38e7b7ddb624c3388fb", 0xaf}, {&(0x7f0000000440)="153595a25f", 0x5}, {&(0x7f00000007c0)="e1cd3b3050795588c20f8d61b9e8462ed76116eccbcf4c0cfc5c927a26c3f82c34945f10cc57d3fa797a6261a611249b5dfbaa976c5200ef8575b6c2061dc7da5ea28e834a23ad6a5059f7df177577f044279f115363b73d2abf281f3033f7a98e585468b4698c76b85a599c76d42c797e60b79db34d6d0e56ddaaa9bdfdb53cc3083fe78bd4d60ac044d1c71934317be5fe3738aa35510f42ada8406176c688e2f35a2f37fc8dc3a4921e764b0bdd3579b84eb9bc3fa1ea70a4b0f8ecf44dbb743835267982b3d5045d2720b4c7afa9ce16b195cba85f2e99edf4d9596555c27c5e144c5d1ccba86706436265d1a804aaa390f750b51c5da4", 0xf9}], 0x8, &(0x7f0000000cc0)=[@rights={{0x2c, 0x1, 0x1, [r7, r8, r0, r1, r9, r11, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r21}}}, @rights={{0x14, 0x1, 0x1, [r22]}}, @rights={{0x18, 0x1, 0x1, [r0, r26]}}], 0x80, 0x80}, {&(0x7f0000000d40)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000000dc0)="736651766347e07bfca7d39e516e53e46fdf9cb79f610ed82f8c1837aa71bc85be9be6683dadd63cfcc4ec0097819d48198e5776123b5fdf649025e315781c306c013d088fbb34771fc414c5c851d594879673a95786ba64f5ea6159c4d922f867e24eee805969872e29779df99aaf73aa5d68f0adf0621fd74f02258728ec6a0cd5ea50192244c93c1bd8eff3fb48bc03ac070995c4346fb8b6d175f04f4802948a8ef96a9f5e90df1d14e42e2ffbcf8ecf53481c6effde0dc829223b2e1375595a740f4814910780813439e4929f1e71a5ccf162fe2766876eaba1b8960a8f938ec410fe093560affe6d309b0e7dee4a73f117d34f3999f5ea7819905fee7bab45312f7566f8c7970a552a362ce129c6ada9857733254fc57f7996a25b1ef0ba7f5b8ae1e8d7900885253c00e171c2690224227e573a70bb6e9cae3925389aaa20c58a4d834f49e3093e42adba8d0cb2f50264dc7a787fea653f3042cf97cae3dc0c86a1d2323240d01384638243ec064d856e315eed9db78599deec127a503e11666eb212e016e43d4ccc207da3b6ca2e051bd95f80c5e691809068e7f404076057703583a606db95e68b1d5fe5d641ec7b8ff1705923d16e162dcdd0dfd218b565c94de7c9122f8419bc16dd4d4feed1d8a8397103b65c9b3fa9a7a559bd2e740ddc29f427fb607a95589039416f6141096f0fbebcd0d864315019c62efddcaf3c0b7047bb459082c62cb94d8ca41f196959e41d1f3c4991fda41ce114b327c48a25f2e10de9a0c6af2c7d08fdb4b11906e10e36ef74bc568781989c2d66569d12b49b731ede36ec7517bbff8e34ac12970f87fad461e618a2686ccf220173046c66abbdf57426be03919f95b307aa8093abe7b0ab61bf5807bef61f070188ecb5c31b079bea62a485315f895a93de958778a911f245a60a2061453dae0fb8083694d60ed6a089fb5749e23d7c7b9b7a0aaff6f0e89cf03ceeaa653f574cb890dafbe85af7884d480c0fc77d43892f80a513bab006a06132aaa0e403475a25d822f2ca7e3b40d2358b33a4f0615c69357ea3a05e64dfb232f086a8d83bd5faef3b730f6d4f9ceeec4860801596bccc2ff758796f26c90dbaa5015accc2e6fe9328b26e7624a0bd7ecae237bb008658f4b5ed231a4895584b6768c388979142752905eb43969f722986228f168a78da48b4e603d40d14c8ae060676a97b397add420c757fc16c6c3b43d8944df9e8af1d89e399d00cbbf49f54a6ecbd866e86050a7593be40b3e7e59508a068e27103ac0f341a56785658fe53be56982305b4a41fd4fcf95bd54ee54dce1bd34a6005ba6d130e4e8dc105c92c99187a085f57a700ac822922286c04c1522ca82c5e993efe0c5ad6f8af0de627f82141ce819b95ef58269bc6ebddadfecb1e88ba12882af3fb514b4321d253c6f41a98f469bdc1a5b42647643f7598be0de58daf7cc1757e2ce46991210a041a16305fe7ae7132f945404381564d2776bbdea71cb1b7d73b6224722c813cfd27718890792efa65d1dfe24a16a910eea4f7a104f8f9d34be539c3a7146f04a47aa0e9bd1366281653242ebf199e968fdac053024d9a52e437272a94bc0bfd69e05fb9a90021ac3a427bc4a7baac82a3ccd2aeea7238878de718ab8332fc096e662ea4cecf380e1560aaa73934af43cd160ebee5cdd0184bb4a7cfd05a42edf04eb99d3ed4be64712018d004c3b37f095acb2fcc81b2e0ea53e85c2d8be18074c2b77234aab44b4f011a14f5c05a54931887827cd5ad17220e986a18e06cf6fe0f4408cc98721abfbeca0928ebcd1d299ca93197138fe4c7709ca40ee4557c6343244d3dda670c9c716787dcf1df6a1614e29473e9172f1745b3f547e3e389f7c75bbf25014189dac906e05fb2ffb7c830cc62eaede2637908713d462ac8dc01744cd0ddd9f2e80fbff5a71343025c4c04fbb67f79e095206fcd94548827583b91358d16e84c2d7b96a59d4f34798ac74b171bb92f5916622765960d3d13f8e90c8f5a457cb4adb192d25b4223a5269091f6442e46aa81c2fc647eb54dfd5e4ad38cb83a1e47ae5a582927913dc67d31c8e207972683dbed54bae9dcbfb753d4b04789b63a08b8ea60e6a79ce073c6157c622054a6ad615a831b708c4c1859a7526e20a581895237f70b92c5ed2e5144cc2b17522d9d2d87d2cd1897e9f19649c3b52439f76b37e473f2c6c73650593db570cc799c74a60ba8cb3d808bffc6910f352463f584ad1e6f6b4fbb33c19187c2e6e47a388a6c7dd51b52248185527ebc4b645653aba4092d2fb9a1869f619a0f5ada7f5a9b68673ca35e39344e067663345b9e2deb128e66b01016abd54ecff76fdcaac7a02468ddba17cad07176b239d4a794e829bee74109afacb64e019de1ae93523e500093eb567a70b12749a0317ab357956fc1d4e72a239853e48c380b278f06d4712be58182bee39c3a305e90828b08b8d3bd1d691961a488415b1fa75e32fbeec295a0020b6ad998e9e22d442130ef8db4c3c1042b55a43b90e66fb61153ed7699d506dec6dcec07db1f9ffe6a69eb10910f4da0a2d1db4a69fbf114f281a5ecd7568acdd01f51a8b7c41cf527a5762ee7c4a725bcc0fedae092de1991b2f9110ca7bbb7d9842f282ac0a0cccbb27dec52492a47df433df19faeef27ede278e6377314a6d13d9df60202a5bf5c98b5e76638d9cec37f50189e641a59f8a844b55c0258425cf7f4f934cd152ab795deec517aed6fbe1acac98839a67e9bbe95774ca2c7587f4fda74924f75e9b28b6d45275fbf889269bd720d744d9be7f92d372b9030a17c7eacbfab1f1e6e983d785301edc28b1fd2f35c27017c75ac3cbb61ce35e482ff269fb7812b67ae01a4afaf9b7428725e4d8e7fbf7a7323885077990e76bf2683e0a2a299dab9fc6e4b723424f42e30055719b3850de78205028f6fec7f6308897e90939d3eab399da8bcaea4c2b671746cffc46fcd407e157c4b248f4148c395490d173487e54c3a37348363449fc7499f725e7a6e8dcbe31ee01b1ada1bf75f762d2f88e872a44c27dae31e1ce7076c9874ee5040b8158cd6342a8d71e1a40c430b4fde3074507d5c9ec9637b71c491182bb68abc8ffb0f31ce6958ce5008c1e39c4f1c06f5f1e3f212401b55d0f61220d679d62d5ed0c431e509ad8e9b63e6cb9d0b7984d882f78527184abaf6e1b1922a810d7a178e4b420518776aca7ca2e9a264d2d93a501d4024e520b576ee32abddedb81e0d154254e3ffaf2e5f7eedceffb5c85fabedd6dfe5e75be25ee94a1b33862fd2e5e18b7520e4600a76b0eee8f453e3e39e6a0e0eba632c09e87c6a2e07d2eebde5096c99967e4444c4c2db4e05e9a69d1161af0509ffe8514674183a859dfda43ef6a027adce596a2266a336a64e7d196cf835ce2f722a677abdc93bc1972b7afd6526f114b13aa8eab726be412bb26c35e0bb03041bee34979d640b1eece2bc490503776daa701f324b48c14055762b885bae8c1e20b282152f4cffd53bfe0b2ee3d45cd94ab32ffca234b017d87c7becbb687a184c41875d5fe337e33c7094ddd12b3b3b841ba2fc52d9a68c5e4e23a5ce24292e569365d989976cb32b9d7958d60eb2b77088e70ef63e0c206f3d2e08bfa1b09a0a5f6fb6f1e7ab410c2a16fb92e7041710778b84da68f6dbdfa64d417e1e03c921d122959582e2451c5460594aa6c96f8998118ce8a309e588fe566ce7ae1b4832f26cb723106acdc4641ac099b1279f1876a878ca54bbdc1f78b7a0ad42125cd2c2879a28bdbcea2b5b659c71fac53d1bf18d70043c5acf5fd5d6b49a0ee29fb873f0195e242683b1f9f3eb4a5c0727945d37f82ce772225374c709833c37fad1ef10e67ceaba20bac303f76b798ea738facd7a75a6792e5e2370af7a0bae40f7679a36693ba89e6818349178919ca4a5be222b6aa3ef86c26ce4e55a2dc9059eff8d668e6a045c171ade1fb5fff2928624e36d9a6d34bcd032936b3bc821f2d3c658de21161486f69d9cfecdf187ba4899fad39dbd85b7bb910298f2180f1d61ca6e6d366d9278e85abddb8cc0241c408c9c9f377f254618f58fb0768acaae903f0f00bf9380f79ea70b6bae3c911bf86152eaa5f20f1f95240f089779970efafbd592c2e588420cf25e982c2262f6bcdc39388911b20fce0ff9cfaa80b5286a24da0ada32432cbd1cbae02034a560e3fd38b2f5ad2910294e0a559a50660610e6a4ab10676c0f1ff7b2bea9abe905533b117689b290099ed42ffc2c3aa800d1a0758b43b1681059d821d6d56c1f607a9f51515d287cd450d44e154c7b96b893da55c09075c2db697eb6eae8d29a7476bd31d8ae4fab5ad242a23ace421d1245093a13ba9a426fbbdb61763f97a16ba602c3fa13d12eed02718957674709d3fccff75ab6d4a1c1274f6ed3c42e53933803c7c046dcf9f1c70c008cffb6ef7aafa6662536a43351e4914e65bf29423b36774e053eccb4f034cdafcb0d5fd69c7a671843d250341c49ac20a1ef9c90a886857faffab8c168e95a33dcb730eb84c7df71cfba6b56ce642e68447674ef3ec17cb1c3ade318cc2a1388a18e3c7cd75350b55cc3607aee74440fa407c2ef7e7db85e6e00cc448b87d6985f00bc08bbc8dbd53933459cbc640370a1f6f177c4f25f1079c79d80c7e5308dbbe4b80cd8d46ab9b07683ab2ecd44bf987153a32a15cad382a70298154f31883a261fcc6b6386a3adc26970651dd6390eb35de9560d1384b0ba33c8a0932b8bdb81eed798d240392d35bb6f9605370201e803ebaf921ffa61fda65b632e0c34c9008d33f192c569552b4b38110ba52bb58cf149769f921401936b61038377fd892de01c15018f566f1c5252ab8dd0cc7cbc94191e36753ab5015807efae4c4512bafeb9f273f4f3b51d8d31aac2a635bf9ddb4c2c10637ea94fe0b26fc4f4dfdfce41237f7ed07c70572edbb773367f37dd20587538a53b5b4fd27f1012834ca71d9ed0e97a534a2054880e507ee56fc48262b2c49801135f4ae6556acc5ed31b21ab1ae2e9cd6aeaac0bca3ee4a011adf08919f0d60d1daf5d9f94d57dd8995ae8d85ab311ba76e3e91411b70d02ef31e5102520a675fc2d6053720e3a4dd266485c5dbbf6829fc76122442279b4016148a04f523823929755b290c06b544c4f7d7ebb7f8ae7df8bd7c082c4e2e4f71d9b9b02a9afc39d18a5d6a50b53aee0f9f7aa048e80daa6ce9bd5da1cdfe4ee3d21cf4bc218c58969414b3f551c162833c4c56816ee2dd0f189a2192f3f1c1f09410d92f1f63ab43992177ef8b6c23335758c56fbd27789b54e8231960113599e09117c59f7ccd6ba3c0b1e0f8422018d97b4bcd2dc51e90dab83efc9bc32253c43ae47566ff90245d915f1f7aab1c126f56ee77aa409d1cecaa1b5b99935a24a9011eadb5e9a9018cec5d7f5516d429fea6c616c408c6ae00fd78e08198d7ca11cd857d86b6f2876b02da0998ea561f0eeeecbeefc7cae3072fd10d712abeec958bf20501b06fc6765e2ea2a520770e619547924bdf2d3081b00e15e052becbea220a9d1495d6a878d6fd5d1f56b1f1d3c6806663053716081153cc2e28dbc9356e10012a1048a600263766e486ac06f2cf9671e0352f2bf25b1e2458c1f181037b075fa35e98fcd97e406483c73e6209775ff24b75f90e084ca288a9ee278bf27be03f68ee6781c20af86b50efe9d877f25277ee94e3cf20d8fb6ace0509fbd21b1d3f2481706ea66b2739d150245df3bfca0ba4b62", 0x1000}, {&(0x7f0000001dc0)="0bbfb39ee0705f01419af7de22b220ae7d107aad7815718bb39168abda0ae746a97c4b2bd1a520c042e199127be7b9b38fe8a18c65349940edc1d12bb5907cffbf7e1e7ffd6ae353a0b264f00fdbf917c767dd35e6c7107472a2091d85f1a9722f20ceca63b5606f32454f32daa130a8afd65f369e85d597fdd3ba8bc041539c9f27e2d4e59c052d6289addb2c80d1b4f423760fb5f404f0b49df69540cceb834686f0224acb08107b4b9f4195e94772b5714d99d96f968ff32fffe11574668d19a9e92c339082bb9a1faee7547835b629d6", 0xd2}, {&(0x7f0000001ec0)="dc70692b4c83d035b513f2fbcb6599fc3bbe56cbe73f4373b77d3e4de4d3c20884638389c7c1201808908d80e1b2ba340b87edcdee96f4009c423751037676d215e5eb583c6d6e67d801a2e014118d07171e83080d8935829547f265b9006d2d5e3cd57d15beeafc89923da258a4d4b1a27748874330cb2efa6a92f0b729", 0x7e}, {&(0x7f0000001f40)="5f523a1b576dc1dda69bcc810012d83057215f4d00a3ae9dbf6e4a25723c0d039fcdd09f", 0x24}, {&(0x7f0000001f80)="bbb10836b8efecb240a1aeeed53e2ab436f1813c39b68835d58af3f950852a8a5cf2cec5cb3522fe7e4cc41105b8fd91a731cd6d70d8f79330e45d89a00991149e044854147779869812b639c4795c4c9c02d663eb9f544b50cdebc2004f0259b5fa4af3ecb809f41232516a3dee885a95b777696914cf596c67b8bee9eb923632dd2e209271f3db19bb13f983fcaaafe6a07593c81d25a154a3fcecf1", 0x9d}, {&(0x7f0000002040)="e0200d5fdba158ee913da4ef4ecb54e784f9b0299522102a8e9643aa87f6d77274a2d6a9119a510deb80eea8705ed5f1e7f044b0406ea61991dd73e9418f927b4ecd7552a3550940a026a1ed32f97a20e18c23ac472e79284abc0ab3c8f9dbae95e469ea955043e12ec3e2af6ab101c2576f40f0d84455204c808e6fbf00f4ba3135b0ff", 0x84}], 0x6, &(0x7f0000002400)=[@cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @cred={{0x1c, 0x1, 0x2, {r30, r32, r41}}}, @rights={{0x24, 0x1, 0x1, [r0, r42, r44, r45, r47]}}], 0x68, 0x20000000}, {&(0x7f0000002480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004940), 0x0, &(0x7f0000004a80)=[@rights={{0x28, 0x1, 0x1, [r1, r49, r51, r52, r1, r54]}}, @cred={{0x1c, 0x1, 0x2, {r56, r58, r61}}}, @rights={{0x24, 0x1, 0x1, [r65, r66, r1, r0, 0xffffffffffffffff]}}], 0x70}], 0x3, 0x20000004)

19:52:28 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x7400)

19:52:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x60)

19:52:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88003f01700", 0x2e}], 0x1}, 0x0)

19:52:28 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
setsockopt$sock_int(r1, 0x1, 0x58, &(0x7f0000000040)=0x5, 0x4)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000080)={'eql\x00', 0x6d3fcd40})
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88004f01700", 0x2e}], 0x1}, 0x0)

19:52:29 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x7a00)

[ 1437.213440][   T25] audit: type=1800 audit(1572119548.974:581): pid=23259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17353 res=0
19:52:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x61)

19:52:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000020000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88005f01700", 0x2e}], 0x1}, 0x0)

19:52:29 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x9906)

19:52:29 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x2, 0x4}, {0x8, 0x9}]}, 0x14, 0x2)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:29 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0xffff898d, 0x4)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10366}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x62)

19:52:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88006f01700", 0x2e}], 0x1}, 0x0)

19:52:29 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xc00e)

[ 1438.166279][   T25] audit: type=1800 audit(1572119549.924:582): pid=23411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17347 res=0
[ 1438.268314][T23461] validate_nla: 11 callbacks suppressed
[ 1438.268333][T23461] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88007f01700", 0x2e}], 0x1}, 0x0)

19:52:30 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000030000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:30 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x34000)

19:52:30 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x63)

[ 1438.538368][T23537] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f8800af01700", 0x2e}], 0x1}, 0x0)

[ 1438.734975][T23543] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1438.875456][   T25] audit: type=1800 audit(1572119550.634:583): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16545 res=0
19:52:30 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x400300)

19:52:30 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000040000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1438.988836][T23551] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:30 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080))
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
write(r1, &(0x7f0000000040), 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1439.238020][T23559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1439.290709][T23559] __nla_validate_parse: 11 callbacks suppressed
[ 1439.290725][T23559] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f8800ef01700", 0x2e}], 0x1}, 0x0)

19:52:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x64)

19:52:31 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x1000000)

19:52:31 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040))
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:31 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000070000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:31 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r3=>0x0)
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x1, 0x1, 0x80000001, 0x7fffffff, 0x40, 0x2, 0x4}, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
r5 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r5, 0x0, 0xfffffffffffffeb2, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r5, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r6=>0x0})
recvmmsg(r5, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00001a7fe4)=[@in={0x2, 0x4e22, @broadcast}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000eaed761c766b6f8885df441ba45420fb37f526d15524ad51d992292149ab5d7c680de9238c76560e2e5b73e6eb3b0110a7d76e1272cd73f4c78af3310c0ed66e38c2794607c13e6b8d492db7ee5d9f4639d2fd5c16914dedf147b7e41363192a092ff5d26ff184363026827e9f8468afda4359d9bdb2a25126296e4f8c098a6dcee70f56beb7f49d9817d7c53db7b1d0478e043c2fdfdecf43d95c6d4125458e67eb4b3cc26b", @ANYRES32=<r8=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x3f, 0xfffffffd}, 0x10)
r9 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r9, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r10=>0x0})
recvmmsg(r9, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r10+30000000})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000240)={0x0, r11, 0x8, 0x100, 0x8001, 0x8001})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={<r12=>r8, 0x80000000}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={r12, 0x2}, 0x8)
write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r13=>0x0)
ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f00000001c0)={0x5, 0x320000, "8a90e7d9c5db8648be35c878d8e76954f69a5c58a7974bfa", {0x4, 0x1}, 0x6})
io_submit(r13, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1439.680258][T23675] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1439.735918][T23675] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1439.780075][T23676] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1439.793113][T23676] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f8800ff01700", 0x2e}], 0x1}, 0x0)

19:52:31 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x2000000)

19:52:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x65)

[ 1440.045507][T23791] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1440.084664][T23791] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88048f01700", 0x2e}], 0x1}, 0x0)

[ 1440.206336][T23797] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1440.246370][T23797] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1440.268533][   T25] audit: type=1800 audit(1572119552.024:584): pid=23788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17372 res=0
19:52:32 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lapb0\x00', 0xffffffffffffff62)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000090000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1440.364320][T23801] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1440.420251][T23801] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x3000000)

19:52:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x66)

19:52:32 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0xab, 0x2, 0xd800}, 0x4)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1440.660675][T23810] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f8804cf01700", 0x2e}], 0x1}, 0x0)

19:52:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x4000000)

[ 1441.014821][T23928] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:32 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendto(r1, &(0x7f0000000280)="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", 0x1000, 0x40000, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x7, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x67)

[ 1441.042380][   T25] audit: type=1800 audit(1572119552.794:585): pid=23814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17137 res=0
[ 1441.091043][T23931] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:33 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x5000000)

19:52:33 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000a0000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88060f01700", 0x2e}], 0x1}, 0x0)

[ 1441.459198][T24045] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:33 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x68)

19:52:33 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000d06000)=0x7, 0xfffffffffffffced)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x306, @random="5a61c02d487d"}, 0x40, {0x2, 0x4e24, @rand_addr=0x40}, 'vcan0\x00'})

19:52:33 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6000000)

19:52:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88068f01700", 0x2e}], 0x1}, 0x0)

[ 1441.904597][   T25] audit: type=1800 audit(1572119553.664:586): pid=24049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17370 res=0
19:52:34 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$TIOCEXCL(r2, 0x540c)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r3 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000640)={"cf2960055d1f8a3be9118173b639c33b7ed70e965b58443ea1e357319fa1d1c499334b746d9ce63b067ff6a8313f96af3537e1a9a1f1d8efa1fdb06a7f960d98a00ff6d18099f4e608addbd1dd3417a0687e122dbe6e56b605021cb36e270fe262b7f5a6cc79e0cae347663c2089863351a6a5560b09216a678711c5f15c3a876686bf9915263fa5e679a8a62776372a44b96594f3c7ce5437c6d55ec82133bb4036586786a4c7358d4c949cc5b638a9418d6d087615bb6d55871a771e3a65cb20beb3c82f5251506c5a21f324ddf974f408fc60e4bb7f2e912bed8e0f51bd6ad2ca1f418a13756a7c685976a5431d09d409c4a458a1fa1a47519c8330c80f6da4e5652a582466ec338b2433846893c58f80262480093a8aebf2e1c19b87f0f475cb6264619ad86c0d2160d352c6a175cf9d84442ad66e0e0b0501842ff4b2bb6bc86b6377be04c587b4f56725f5b284040f977cb1c5b4993b28a913c703066cc415d0ecbfe8909f61627f85c0574b9b58b9c624013f5fcc05e4570e138e9bf900b59a6de1fe3b2d783ef6c9886aa24249a5f24ce369de2e0285c0e17924d24ebb92a657dcaaabe1b850f1df8dbdf3a2acc46d888d082266baf5fc6fdf1e90f65be4df9431e5644776e0f5e95ff9251b753015728024efea67441f5fabd5ad4003f944bc2ba363d0ca599b0788b4d0a83964ae7381a04354484bab33d31285424f6271afef956365d64d6fe4ecce56894a8317193bdb41530ec27ce4a603873ba7f29c9f7b43a80e20b6a27bb248ccf75a51743af2d8c003725737c8a62e891bf19a44ce58d0557bbd7531cc1ee2e7f321fc71214f74284cda009dd5a6cbce82ad6414f49b3b019eaabc9c604c8a3f8443d3ac2b4403273183b8941e26921ce4cfa42d34c0e87a664bfc8d884daa3ed030e25f3b5fb9eedd2a29a8756096034251407773e5d74fe6dcde579e1591c53acdcebf64c53260b1e4d5035f079ca0555aa26b3a026ed305ae21311cf86652e29c013bea9e5250cbce88a5e74599818ca134c92b99bfc9d6630feb46d5e2fff2f9698d3883faf89b97a0b76328bb7010de92cb351748d6d0a1dde771ea0cbcc7d0bd6ae8c4aa02b9edf0c58e1e52997648fe4c476b8d2caead30b6a0c19f787c43a453805bfa713a390e44b1cd70b29fc27993fe4d68423d6bcccedc0cc4385d24b53f9d7052ea9dcd5af862952d4f8bd98627ca46b5615cd8fe33223e39905d03d48995fed6c5ec908b7e37e73d7fb44fa6370dc61d6f3553e38ce7e4c808eb8253e8580a2ff6866c4d80bd7d0066a9999c46d6fa647e75911f91ce6a131a0752e8bc28389a708b0f85f11ea21cfe8a509dbb7f4d55d2c113635ac4b75237f90e21c66c7a623ad8ea052f45ab945f5397376e1ce9d97fc90ac4522d52e8dbca319480ad9477edcc5b23f1656ba731bb"})
io_setup(0x2, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:34 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x5624911efb4a1ce)
getsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x4})
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000200)={0x100, 0x2})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$KDMKTONE(r3, 0x4b30, 0x6c2)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5})
ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000040))
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:34 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x69)

19:52:34 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000e0000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f8806cf01700", 0x2e}], 0x1}, 0x0)

19:52:34 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x7000000)

19:52:34 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x8000000)

19:52:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88074f01700", 0x2e}], 0x1}, 0x0)

19:52:34 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x6a)

19:52:34 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x9000000)

19:52:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f8807af01700", 0x2e}], 0x1}, 0x0)

19:52:35 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000f0000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1443.273796][T24303] validate_nla: 11 callbacks suppressed
[ 1443.273811][T24303] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1443.422918][T24307] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:35 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x32403, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L-', 0x2}, 0x28, 0x113903eabddcdf98)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, {}, 0x40, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 'veth0\x00'})
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)

19:52:35 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x6b)

19:52:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f03000", 0x2e}], 0x1}, 0x0)

19:52:35 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xa000000)

19:52:35 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000100000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1444.028604][T24332] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1444.062557][T24330] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f05a00", 0x2e}], 0x1}, 0x0)

19:52:36 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xb000000)

[ 1444.334589][T24443] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1444.360967][T24443] __nla_validate_parse: 11 callbacks suppressed
[ 1444.360986][T24443] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:36 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x6c)

[ 1444.425381][T24446] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1444.462620][T24446] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:36 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x400080, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="5f6f45b1", @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf25030000000400040008000300f9ffffff0800030000000000080002000800000008000200000000000800060006000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5})
write$P9_RATTACH(r5, &(0x7f0000000500)={0xfffffffffffffef1, 0x69, 0x2, {0x0, 0x2, 0x4}}, 0x14)
r6 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000100)=""/93, 0x5d}, {&(0x7f0000000180)=""/128, 0x80}], 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x7, {0x7, 0xfdfffffa, 0x4, 0xfffffffc, 0x20000006, 0x4}})
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r7=>0x0)
r8 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x400, 0x2)
fsetxattr$security_smack_transmute(r8, &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000440)='TRUE', 0x4, 0x1)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f06700", 0x2e}], 0x1}, 0x0)

[ 1444.515396][   T25] audit: type=1800 audit(1572119556.274:587): pid=24438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17395 res=0
19:52:36 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000110000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:36 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xc000000)

[ 1444.769213][T24455] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1444.813018][T24455] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1444.872959][T24463] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1444.909684][T24463] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:36 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)=<r5=>0x0)
process_vm_writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f0000000440)=""/118, 0x76}], 0x4, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/45, 0x2d}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f00000006c0)=""/144, 0x90}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000000880)}], 0x7, 0x0)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/44)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01702", 0x2e}], 0x1}, 0x0)

19:52:36 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x6d)

19:52:36 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xd000000)

[ 1445.151278][T24472] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1445.209923][T24472] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1445.321198][T24481] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01703", 0x2e}], 0x1}, 0x0)

[ 1445.364435][T24481] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:37 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xe000000)

[ 1445.554226][T24585] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:37 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/232, 0xe8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:37 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000340000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x6e)

19:52:37 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101800, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000140), 0x2c9)
r2 = socket$inet(0x2, 0x6, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r6=>0x0})
recvmmsg(r5, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000})
recvfrom(r5, &(0x7f0000000200)=""/43, 0x2b, 0x60, 0x0, 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
r7 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r7, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240))
clock_gettime(0x0, &(0x7f00000003c0)={<r8=>0x0, <r9=>0x0})
recvmmsg(r7, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000580)=""/43, 0x2b}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/98, 0x62}, {&(0x7f0000000640)=""/235, 0xeb}], 0x7, &(0x7f00000007c0)=""/231, 0xe7}, 0x7}, {{&(0x7f00000008c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/66, 0x42}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/190, 0xbe}, {&(0x7f0000000a80)=""/130, 0x82}], 0x4, &(0x7f0000000b80)=""/188, 0xbc}, 0x52c}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000c40)=""/111, 0x6f}, {&(0x7f0000000cc0)=""/29, 0x1d}, {&(0x7f0000000d00)=""/195, 0xc3}, {&(0x7f0000000e00)=""/71, 0x47}, {&(0x7f0000000e80)=""/163, 0xa3}, {&(0x7f0000000f40)=""/129, 0x81}, {&(0x7f0000001000)=""/195, 0xc3}, {&(0x7f0000001100)=""/83, 0x53}, {&(0x7f0000001180)=""/22, 0x16}], 0x9, &(0x7f0000002340)=""/235, 0xeb}, 0x8000}, {{&(0x7f00000011c0)=@xdp, 0x80, &(0x7f0000002480)=[{&(0x7f0000002440)=""/24, 0x18}], 0x1, &(0x7f00000024c0)=""/191, 0xbf}, 0x4944}, {{&(0x7f0000002580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002600)=""/26, 0x1a}, {&(0x7f0000002640)=""/147, 0x93}, {&(0x7f0000002700)=""/69, 0x45}, {&(0x7f0000002780)=""/39, 0x27}, {&(0x7f00000027c0)=""/97, 0x61}, {&(0x7f0000002840)=""/50, 0x32}, {&(0x7f0000002880)=""/53, 0x35}], 0x7}, 0xfffff000}, {{&(0x7f0000002940)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000029c0)=""/8, 0x8}, {&(0x7f0000003ac0)=""/196, 0xc4}, {&(0x7f0000003bc0)=""/248, 0xf8}, {&(0x7f0000003cc0)=""/251, 0xfb}], 0x4, &(0x7f0000003dc0)=""/86, 0x56}, 0x8001}, {{&(0x7f0000003e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/195, 0xc3}, {&(0x7f0000004fc0)=""/130, 0x82}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/71, 0x47}], 0x5, &(0x7f0000006180)=""/4096, 0x1000}, 0x7}], 0x7, 0x0, &(0x7f0000002a80)={r8, r9+30000000})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f0000000380)={{0x3, 0x0, @reserved="c7dd69345477f592ef0d6da711a9b9e68cc76ab0609c1e265184cfc97822c031"}})
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x7f)
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r10=>0x0})
r11 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2)
sendto$inet(r11, &(0x7f0000000280)="2f573bbe4da2b70cb6842b36cccc52df7d991bdc4ef996e584e313fc39a30b1a5816440f2b295d25dfb0b6893524864aa716ec5ad27f1f32f2b09e07123a19f5a75ce3c5c8f92694c4ceeed322d28b6fbea51ca0795ef7b7288aed5dd14e103f687c67f46f70e0416e55f995b45726ddca34c7fedba1189d44c6c7e55c2655dbbe8fe4cd08844fe74516bf30ad78e00bdc64dd693b9d6d8bbfdbbc666c9f2681a31e649bcec0c79055e61f919e56c0fd841dff658724502e15c30c56c9758f93346c4fdb0bc8dfa1927ec66a2ee568830ffdd8754eaa1a7b", 0xd8, 0x88adad8b91cea436, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r10+30000000})
dup2(r2, r0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1445.714003][T24588] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01704", 0x2e}], 0x1}, 0x0)

19:52:37 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xf000000)

[ 1446.138877][T24664] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1446.166599][T24696] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x6f)

19:52:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01705", 0x2e}], 0x1}, 0x0)

19:52:38 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f00000001c0)="7cbe2b586e0d4e2b115126fbcce3a22c601da028eca97e58c9593d75e8d4b7ffaaa537d16e6975e9e4b96d897f67bdc511d169916116a1c425690a9ee95f2944838afb62a27b9caac60588a4697c48d0ed70561b7fb547a4a80b1115ed9c4589274e0f83d123a5c2d5a23b", 0x6b, 0x20000091, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x8}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2000, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000340)={0x8a, &(0x7f0000000280)="8737705151cc08ed4e9f4b6326079058b7aedfd9a0be093151e2bbc1611d209f9a4998556a3f3629015fa0f176897bac7d40d9f97295a1476a0be8f64bfa11917f7a449f74430f0fbb31fbfcff9215d61b23265e1e68933e91f1cfd4ea2e4f949695d76b99f1fc7372637d384f607136139aaae45e517855056f998fc45f7228c29b392d80714432de43"})

19:52:38 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x19000000)

[ 1446.393900][   T25] audit: type=1800 audit(1572119558.154:588): pid=24713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17413 res=0
19:52:38 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000005f0000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01706", 0x2e}], 0x1}, 0x0)

19:52:38 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="bb80688b9041eb274c0c34d08ef79e74", 0x10}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:38 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x20000000)

19:52:38 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)="3407f5637b40565119dec6b002e999cc14abc36399b4b22277aff47ae7c92994e183c1135a0400677f05ce501a6a865986b61952db1e7f42854e56b76e9ba2a8ecc67464159fd4bad9ee1bbfc84def296fe215d144a9a80cd2bccfb0ab3b13200658fa4eed7d58703b6158166df146959fddaa4b893a7510a43eea2ef8d4504d7af1ca596a57", 0x86, r1}, 0x68)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
ftruncate(r2, 0x1)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x70)

19:52:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01707", 0x2e}], 0x1}, 0x0)

19:52:38 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000f40100000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0170a", 0x2e}], 0x1}, 0x0)

19:52:39 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x48000000)

19:52:39 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x100, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x71)

19:52:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0170e", 0x2e}], 0x1}, 0x0)

[ 1447.764894][   T25] audit: type=1800 audit(1572119559.524:589): pid=24963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17435 res=0
19:52:39 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000400200000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x72)

19:52:40 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x4c000000)

19:52:40 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x102e4a89ea2af47a, {0xfff, 0x1, 0x0, 0xfff}, {0x8, 0x4, 0x9, 0x6}, {0x40, 0x8001}})
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0170f", 0x2e}], 0x1}, 0x0)

19:52:40 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x101)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
r4 = add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="a6877d367127756ad9db3658f5fe25ffc8115c0665b06e0a83c217c81eb5d62603c11d7fb8fa2e1bef095a28aff99ef7e41377c50d4067fdeed277c46f922054d8caf49f689f20c9a3cafec0dfabcdf605d3041ccef01de606f500dc6e49664a0118aa4a3edbcdd78ed03ca5e1a9dbc57bc65e0280be7f0a003f", 0x7a, 0xfffffffffffffffa)
keyctl$revoke(0x3, r4)
ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000000))
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6})
write$P9_RATTACH(r6, &(0x7f0000000080)={0x14, 0x69, 0x0, {0xaa}}, 0x273)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x0, &(0x7f0000000540))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000000000051b80450ae09d9f1ed5e0dd822e89f30f5b29749e828df82c711908f5c0fd3ffba85ad7e63f409ed50c3c25b6ef9bf132169e60d4b652197e6b2b13e204f794cdd800066653b0a6b0549c", @ANYRES32=r10], 0x2}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', r10})
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000240)={r10, 0x1, 0x6, @remote}, 0x10)

19:52:40 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000300000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1448.504080][T25123] validate_nla: 13 callbacks suppressed
[ 1448.504095][T25123] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1448.551920][T25185] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:40 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x2, 0xa80c0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="280200080000000000000100d00000000000000141000825310800000000000000400000dbce08cbbecab85e7f3e7fd1da1a2f36520c413223eab21ec4fe6e08af2aaaa009b2dfe3be31885093b1f99b27b73880681d"], 0x34}}, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0400400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0xc746d4719b6dbf8d, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x8000)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r6=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000})
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8000}, 0x8)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r8, 0x0, 0x0, 0x2000002)
fallocate(r7, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8})
accept$ax25(r7, &(0x7f0000000280)={{0x3, @bcast}, [@null, @netrom, @null, @null, @rose, @remote, @remote, @default]}, &(0x7f0000000300)=0x48)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01748", 0x2e}], 0x1}, 0x0)

19:52:40 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x60000000)

19:52:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x73)

[ 1448.913407][T25221] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1448.971971][T25239] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:40 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x68000000)

[ 1449.058812][   T25] audit: type=1800 audit(1572119560.814:590): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17617 res=0
19:52:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0174c", 0x2e}], 0x1}, 0x0)

19:52:40 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000e80300000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1449.182949][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1449.188977][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1449.194839][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1449.200635][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:52:41 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
r5 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r6=>0x0})
recvmmsg(r5, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000})
r7 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r7, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r8=>0x0})
recvmmsg(r7, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r8+30000000})
r9 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r9, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r10=>0x0})
recvmmsg(r9, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r10+30000000})
r11 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r11, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r11, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r12=>0x0})
recvmmsg(r11, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r12+30000000})
r13 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r13, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r13, 0x0, 0xfffffffffffffdfc, 0x30014040, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r14=>0x0})
recvmmsg(r13, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r14+30000000})
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000000000001000000000000000800000000000000", @ANYRES32=r3, @ANYBLOB="0000000026dcffffffffffff00"/28, @ANYRES32=r0, @ANYBLOB="000000000100"/28, @ANYRES32=r5, @ANYBLOB="0000000001000100"/28, @ANYRES32=r7, @ANYBLOB="00000000ff0f00"/28, @ANYRES32, @ANYBLOB="000000000600"/28, @ANYRES32=r9, @ANYBLOB="00000000010000800000000000000000000000000000000000d5c8105ee7735d0000f38c31fbd848c8a1a35cacbf8004e7141b925952b73d685d8da18f98f9d051ed01f6abeec8e6b489ff0700001b0956b1dbf5e71aefa8f8f4bedf12a611641d6fea9875eda759f8b916a094c43a97f61dd20576afa2085883a9c092a9a3735f0beabaab0346ed85de82291f331bab12df9f8bed6acbf1a3a25aa57d084215228d10721fdae04000f1ef8eda3a181b7db828cb38ede2a315f63a15be3fc444a5f1dd", @ANYRES32=r11, @ANYBLOB="00000000001000"/28, @ANYRES32=r13, @ANYBLOB="00000000000000000000cd65cbac63e76d4e645c0000000000090900"])
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1449.417628][T25340] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1449.456091][T25340] __nla_validate_parse: 13 callbacks suppressed
19:52:41 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x74)

19:52:41 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000100)=""/141, &(0x7f0000000000)=0x8d)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6)

[ 1449.456108][T25340] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1449.510779][T25341] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1449.556988][T25341] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:41 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6c000000)

19:52:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01760", 0x2e}], 0x1}, 0x0)

19:52:41 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:41 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x75)

[ 1449.848990][T25453] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1449.907825][T25453] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:41 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x74000000)

[ 1450.021570][   T25] audit: type=1800 audit(1572119561.774:591): pid=25460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17381 res=0
[ 1450.088345][T25468] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:41 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x88)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)={0x2, 0xc, [0x8, 0x2, 0x7fffffff]})
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0))
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5})
write$P9_RLINK(r4, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1450.158213][T25468] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:42 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000700000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1450.263062][T25474] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1450.282143][T25474] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:42 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x76)

19:52:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01768", 0x2e}], 0x1}, 0x0)

19:52:42 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x7a000000)

[ 1450.607445][T25552] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1450.643962][T25552] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1450.669212][T25583] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:42 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000080), 0xfffffeab)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1450.760075][   T25] audit: type=1800 audit(1572119562.514:592): pid=25464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17444 res=0
19:52:42 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0xb5360000)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
write$UHID_DESTROY(r2, &(0x7f0000000100), 0x4)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r3 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffcde)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5})
write$P9_RREAD(r4, &(0x7f0000000000)={0x1b, 0x75, 0x1, {0x10, "8ffc811e4695bfaa695d5d4478616dc4"}}, 0x1b)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:42 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0)
getpeername$netlink(r1, &(0x7f0000000080), &(0x7f0000000140)=0xc)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0176c", 0x2e}], 0x1}, 0x0)

19:52:42 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x99060000)

19:52:42 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x77)

19:52:42 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000900000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1451.314103][T25710] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:43 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x9effffff)

19:52:43 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000180)=""/75)
r3 = socket(0xa, 0x80001, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, <r4=>0x0}, &(0x7f0000b34ffc)=0xc)
setuid(r4)
fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="040000000100", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="d9ea943eecec0f352fcb58c719e502a753b558ce81b7a8cfb02b63099f5e011b42277856823352ac6ba4d31a04579d005fbeddff36eccd791174da96d0cfb40b37a89e3083d7aa8c0bfe2c2a9b2dc60fcb05167ce65f2299560837da641b8f4262a8db8af013", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB], 0xb, 0x0)
chown(&(0x7f0000000200)='./file0\x00', r4, r5)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
fallocate(r7, 0x0, 0x0, 0x2000002)
fallocate(r6, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7})
sendto$unix(r6, &(0x7f0000000140)="bd8151e20000274338cd3523409d0000f80000000000000000", 0x3, 0x4040058, 0x0, 0xfffffdd7)
syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x80, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r9, 0x0, 0x0, 0x2000002)
fallocate(r8, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, r9})
r10 = openat$cgroup_ro(r9, &(0x7f0000000440)='cpuacct.usage_\x02\x00s\x00->m\xc8\x03:\xba\xb9|\x1a\x1d290Q0\x83;8`\xfd\xe8S\xe3\xddfK\x94a%\xa0\x1d\x9b\x01\xdc\xd3\x82\xba\v\x04\"\xacU\x87\xdb\'\xf1\x04\x00\xcd\x18nMug\x85\x1c7\x03qJ\x06\xa5\xebGS\xc1P\xb5\xbf\xfaW\x89\xfb\\;@[\xa3z\xe9\xa2P\x88\x96\x91\xc7\xd3\x186\xea\x93~\xf0\xfb!\xf3g\xeeq]\xcd\x84\x93\xf7f\x92\x06\x10X|\'H\xbf\xca\xf7\xab\r\xde\x86\x18\xf9\f$\xf1\xd3x\x14!\xf6\xed\x83\x16\xce\xbe1\x89\xcd&y\xee\xb5r\xfb\tT-\xefm5E\xd1\xef\x1fm.\xff\x16\x99J\x1e(Nx\x1e\xed\x91\x86\xba\xbb\xc6\xe2K\xb6\x1c\x98\xcaD\x8awg\x12Oe\xf7dHp\xf3|\x8e\xb1\xfdZ\x85\xb6\xb1\\\x1e\xd4R\xa0\x9a\x94\xcb\xc8bP\xe8\x15\xa4\x01\xb8\xbe\x0e\xa1G\xcd\xd0#\xd0w\x06T\x89\xbd\xbf\x8a\xb5n\xbbD\x120@\xb1\xadzrh\x85{\xee8\x86r\xbe9\xea\xac4\xda\x82\xb6\xce(\xad\x1e\x9ad\xfd\v\x9e\xba\x85\x0fSL\x93\x0f\xa8\xee\xf0$X*\xd4\xe1\xbdK4^p\x15D\xb7\"\xfd\x96@:\xfa3\xc0/\xadz[\xa9\x7f\xc4T', 0x275a, 0x0)
r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r11, 0x0, 0x0, 0x2000002)
fallocate(r10, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11})
ioctl$TCFLSH(r11, 0x540b, 0x80000000)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:43 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01774", 0x2e}], 0x1}, 0x0)

19:52:43 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4122625fd935802a, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:43 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x78)

19:52:43 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xc00e0000)

19:52:43 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
openat(r1, &(0x7f0000000080)='./file0\x00', 0x1000, 0x6a)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r4 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r7=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r7, 0x3f}, 0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r7, 0x3}, &(0x7f0000000140)=0x8)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r8=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r8+30000000})
sendto$inet(r3, &(0x7f0000000040)="6059826a52603b2ed9f3b958da9e", 0xe, 0xc9d3, 0x0, 0x0)

[ 1451.900577][T25833] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:43 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x79)

19:52:43 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0177a", 0x2e}], 0x1}, 0x0)

[ 1452.150504][   T25] audit: type=1800 audit(1572119563.904:593): pid=25724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17454 res=0
19:52:44 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xf0ffffff)

19:52:44 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000a00000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1452.356643][T25933] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:44 executing program 0:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
r2 = getpid()
r3 = syz_open_procfs(r2, 0x0)
r4 = getpid()
syz_open_procfs(r4, 0x0)
sched_getattr(r4, &(0x7f0000000040)={0x30}, 0x1b, 0x37b96724f73ec944)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000240)=0x11, 0x4)
sendto$unix(r1, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000140)={{0x2, 0x0, @descriptor="684016f04ee606cc"}})

19:52:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:44 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x7a)

19:52:44 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
r3 = socket(0xa, 0x80001, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, <r4=>0x0}, &(0x7f0000b34ffc)=0xc)
setuid(r4)
ioctl$TUNSETOWNER(r2, 0x400454cc, r4)
sync()
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1453.097686][   T25] audit: type=1800 audit(1572119564.854:594): pid=26067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17428 res=0
19:52:45 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x440200, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040))
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r3 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r1, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:45 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xffffff7f)

19:52:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:45 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x7b)

19:52:45 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000e00000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:45 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:45 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xffffff9e)

19:52:45 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x7c)

19:52:45 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r1=>0x0})
openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x20000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000})
syncfs(0xffffffffffffffff)

[ 1453.751913][T26307] validate_nla: 6 callbacks suppressed
[ 1453.751930][T26307] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:45 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xfffffff0)

19:52:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1454.184288][T26428] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:46 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x82000, 0x0)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4c0, 0x0)
ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000040))

19:52:46 executing program 0:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000080)={0x4, 0x1})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r1, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:46 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000f00000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:46 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x7d)

19:52:46 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x40030000000000)

19:52:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1454.853780][T26444] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1454.878234][T26444] __nla_validate_parse: 4 callbacks suppressed
[ 1454.878253][T26444] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1454.931618][T26449] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1454.956535][T26449] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f017f5", 0x2e}], 0x1}, 0x0)

19:52:46 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2)
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3)

19:52:46 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x100000000000000)

19:52:47 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x7e)

[ 1455.268194][   T25] audit: type=1800 audit(1572119567.024:595): pid=26560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17464 res=0
[ 1455.318152][T26563] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1455.371202][T26563] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:47 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000001100000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1455.419369][T26656] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1455.502978][T26656] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:47 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x9, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:47 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
clone(0x808c0800, &(0x7f0000000640)="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", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)="ae31bd57b092ee3d3439d7ca17449dbeb6398a5a5d2a21a2cfbfb0a618540a7e9c8d6a194b09edebce154a83e6758f956faa1b8b65b02cebb203e8814d91749192099117d50c966cde6432b692856779a7e7de00812c0fd685b06811fcc7c232406eb02ac4fd13c8a4abe3796c690c543a07f73d4046af9cf2e22a5435252a5789d35b791f5b7dff94efc81d300176d561df60654424496b7337fe34755386fb2ef51a47c0971d3c8ce657a7e7bfbb8f71f9fe1d3ab6c62890729541fd25c226d3f841949be5b5f1")
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:47 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x200000000000000)

19:52:47 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x82)

19:52:47 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000003400000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1456.159537][T26787] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1456.199598][T26787] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1456.226545][T26786] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1456.245290][T26786] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:48 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x300000000000000)

19:52:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f017c0", 0x2e}], 0x1}, 0x0)

19:52:48 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={0x16})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x80)
setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000140)=0x4, 0x4)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1456.513809][T26803] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1456.534439][T26803] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1456.552186][T26805] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:48 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x83)

[ 1456.562654][T26805] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:48 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x400000000000000)

19:52:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1456.836935][   T25] audit: type=1800 audit(1572119568.594:596): pid=26797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17472 res=0
[ 1456.919646][T26879] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:48 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000024000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1456.980825][T26920] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:49 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x100800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'teql0\x00', r5})
r6 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x0, &(0x7f0000000540))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x84)

19:52:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:49 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x800, 0xa4000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000140))
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x3, "6b29ce"}, 0x4)

19:52:49 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x500000000000000)

19:52:49 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000005f00000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:49 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x600000000000000)

19:52:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x85)

19:52:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:50 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x700000000000000)

19:52:50 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x2d, 0x6, 0x8, {0x10, @ether_spec={@local, @random="ebcd615c3965", 0x100}, {0x0, @random="2790e5cb4512", 0x5, 0xeb32, [0x1f, 0x2]}, @udp_ip4_spec={@rand_addr=0x7, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e23, 0x4e23, 0x11}, {0x0, @random="0c87fda90bb2", 0xe1, 0x3, [0x7, 0x3f]}, 0x2, 0x8}, 0x9, [0x0, 0xfffff662, 0xff, 0x3, 0x6, 0x2, 0x8, 0x3f, 0x2]}})
r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1, 0x286802)
clock_gettime(0x0, &(0x7f00000001c0)={<r2=>0x0, <r3=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000440)={{0x9, 0x3, 0x3, 0x101, 'syz0\x00', 0x9}, 0x67, [0x1, 0xc4, 0x80, 0x0, 0x3, 0x101, 0x6, 0xe74, 0x1, 0x6b4f, 0x3ff, 0x3a, 0x3f, 0x16, 0xfffffffffffffffb, 0x80, 0x4, 0x1, 0x8, 0x80000000, 0x5, 0x1, 0xff, 0x8, 0x4, 0xda, 0x4, 0x4, 0x7, 0x8001, 0x6, 0x9, 0xffff, 0x8, 0xd3f1, 0x81, 0x5, 0x2, 0x4, 0x5, 0xf43, 0x6, 0x1, 0x100, 0x9, 0x8, 0x7ff, 0x6, 0x7, 0x6, 0x1, 0x5, 0x9, 0x6, 0xffffffff, 0x6, 0x1, 0x1e67, 0x7fffffff, 0x0, 0x9, 0xb8, 0x50, 0x1, 0x100000000, 0x7fffffff, 0x3, 0x6, 0x8000, 0x2, 0x1, 0x5c8, 0x7d5, 0x4, 0x3, 0x1f, 0x1, 0x9, 0x9, 0x1, 0x1, 0x80000000, 0x2, 0x9, 0x3, 0x7, 0x9be, 0x50, 0x1, 0x3, 0x4, 0x4, 0x8, 0x401, 0x3, 0x3, 0x1, 0xec, 0x9, 0x3f, 0x100, 0x80000000, 0x80000000, 0x7f, 0x7, 0x3, 0x8001, 0x69, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x80, 0x5, 0x4, 0x9, 0x3, 0x1, 0x9, 0x2, 0x7, 0x101, 0x970, 0x10001, 0x2, 0x6145, 0x4, 0x9], {r2, r3+10000000}})
connect$inet(r0, &(0x7f0000000140)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x3)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xb45800)
ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000080)=0x4)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

[ 1458.316365][   T25] audit: type=1800 audit(1572119570.074:597): pid=26950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17389 res=0
[ 1458.692909][   T25] audit: type=1800 audit(1572119570.444:598): pid=26956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18113 res=0
19:52:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x86)

19:52:50 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000003e800000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:50 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x800000000000000)

19:52:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:51 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(r0, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1})
ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0x7})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x420c40cfcac1378, 0x4bfdf5cb87908120, &(0x7f0000002a80)={0x0, r4+30000000})
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r5 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r2, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r6=>0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r8, 0x0, 0x0, 0x2000002)
fallocate(r7, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10})
getpeername$packet(r9, &(0x7f0000000380)={0x11, 0x0, <r11=>0x0}, &(0x7f00000003c0)=0x14)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000400)={r11, 0x1, 0x6, @dev={[], 0x12}}, 0x10)
io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1459.345740][T27189] validate_nla: 8 callbacks suppressed
[ 1459.345757][T27189] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1459.400536][T27197] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:51 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x900000000000000)

19:52:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d3"], 0x1}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18}], 0x18}], 0x146, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000140)=0xfffffffe, 0xffffffffffffffd1)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x880000, 0x0)
sendto$inet(r2, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x87)

[ 1459.856395][T27312] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1459.897595][T27312] __nla_validate_parse: 8 callbacks suppressed
[ 1459.897611][T27312] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1459.932800][T27346] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1459.940954][T27346] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:51 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000001f400000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:51 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xa00000000000000)

19:52:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e23, 0x9, @local, 0x1}], 0x48)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0xfffffffffffffde8)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
ptrace$peekuser(0x3, 0x0, 0x8)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x18c)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xffff, 0x4)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x88)

[ 1460.409302][T27434] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:52 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x10000, 0x0)
ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0xb, 0x729, 0x81, 0x4000, r3})
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000080)=@generic={0x1, 0x9, 0x9})
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0)
r7 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r7, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r8=>0x0})
recvmmsg(r7, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r8+30000000})
ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000140)={r7, 0x7, 0x3, "598e0d63d7b0574dce5123cf80dfc8852b4c125001799afd2063128d7f530c2dca549a999d10108928d79564cd1610638b022d67e1f3ccf6c1f4b4996db098e35865dbdd99c38660916963a8bebe11b8fa126d0fbb851a4a2bae3ffba97b6f359b2ff546e243b24b0365425909d13198e1140637b6bcab54b7ee86f33f77e99e9de37640073568f7675fc5adc8bfbd4f130cd66817d38e9e72e6dc9df5da04f0167f98906b13b832f6ffae0cc8d24f86cc5d1d775953aeb3bb5ca6749ec8c44183550de2b49e413345bb0b42"})

[ 1460.469555][T27434] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1460.487639][T27435] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1460.508437][T27435] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1460.745651][T27444] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1460.786928][T27444] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:52 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xb00000000000000)

19:52:52 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x89)

19:52:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:52 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(r0, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1})
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0xafa, 0x4)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x70fdd222bc6464cd)
write$P9_RATTACH(r5, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x6)
fcntl$setstatus(r2, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0))
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x49, 0x2, {0xe4, 0x4, 0x7}}, 0x14)
io_setup(0x800000029, &(0x7f0000000040)=<r7=>0x0)
io_setup(0x7, &(0x7f0000000300)=<r8=>0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
io_submit(r8, 0x1, &(0x7f0000000440)=[&(0x7f0000000340)={0x60ffffffffff, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)="10000040040200000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xc8}])
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1461.108433][T27553] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1461.146339][T27553] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:52 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000295a11000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1461.167694][T27555] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1461.187147][T27555] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x42b, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
socket$isdn(0x22, 0x3, 0x36)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x440000, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000080)=[0x6, 0x40, 0x7ff], 0x3, 0x400, 0x5, 0x8, 0x5, 0x12d6, {0xffffffff, 0x7ff, 0x400, 0xffff, 0x1, 0x1000, 0x7f, 0x4, 0x1, 0x400, 0x7ff, 0x1f, 0x0, 0x8, "8e20d0d71812c7afff2e8dff3b65baaa63739ddeac2757d64a836d9ab9152f57"}})
sendto$unix(r4, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000001c0)=[@sack_perm, @sack_perm], 0x2)
sendto$inet(r4, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:53 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xc00000000000000)

19:52:53 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x8a)

19:52:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0170e", 0x2e}], 0x1}, 0x0)

[ 1461.548886][T27570] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1461.578830][T27570] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:53 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xd00000000000000)

[ 1461.710635][T27576] Started in network mode
[ 1461.723086][T27576] Own node identity , cluster identity 4711
[ 1461.729296][T27576] Failed to obtain node identity
[ 1461.758975][T27576] Enabling of bearer <eth:caif0> rejected, failed to enable media
[ 1461.809013][T27577] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1461.881505][T27670] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:53 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x8b)

19:52:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0170a", 0x2e}], 0x1}, 0x0)

19:52:53 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x123100)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)

[ 1461.988606][   T25] audit: type=1800 audit(1572119573.744:599): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17477 res=0
[ 1462.116874][   T25] audit: type=1800 audit(1572119573.834:600): pid=27581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=18160 res=0
19:52:53 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xe00000000000000)

19:52:54 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x11e375781e0a71d8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1})
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000100), 0xfffffea3}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x300, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)

19:52:54 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000002814000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:54 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
sched_yield()
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:54 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x8c)

19:52:54 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xf00000000000000)

19:52:54 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x1900000000000000)

19:52:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:54 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/222)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:54 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x8d)

19:52:54 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x2000000000000000)

[ 1463.173833][   T25] audit: type=1800 audit(1572119574.934:601): pid=27923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16834 res=0
19:52:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:55 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000000)={0x1bf, 0x69, 0x0, {0xe1, 0x2}}, 0x14)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0)

19:52:55 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xffffffffffffffab)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:55 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x4800000000000000)

19:52:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:55 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000001428000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1463.742899][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1463.748802][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1463.754654][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1463.760513][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:52:55 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x4c00000000000000)

19:52:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:55 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
r3 = getpid()
r4 = syz_open_procfs(r3, 0x0)
syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
r5 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r6=>0x0})
recvmmsg(r5, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000})
r7 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r7, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r8=>0x0})
recvmmsg(r7, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r8+30000000})
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x8}, 0x0)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:55 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6})
sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0xbc, 0x43, 0x300, 0x70bd2d, 0x25dfdbfd, {0x7}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x3}, @NDTA_THRESH2={0x8, 0x3, 0x7}, @NDTA_THRESH3={0x8, 0x4, 0xfffffffd}, @NDTA_THRESH3={0x8, 0x4, 0x101}, @NDTA_NAME={0x4c, 0x1, 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_THRESH3={0x8, 0x4, 0x9}, @NDTA_PARMS={0x24, 0x6, [@NDTPA_MCAST_PROBES={0x8, 0xb, 0x8}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x1}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x4}, @NDTPA_APP_PROBES={0x8, 0x9, 0x7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x10)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$USBDEVFS_DISCARDURB(r4, 0x550b, &(0x7f0000000000)=0x6)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:55 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x8e)

19:52:55 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6000000000000000)

19:52:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1464.364295][   T25] audit: type=1800 audit(1572119576.104:602): pid=28067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16897 res=0
19:52:56 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6800000000000000)

[ 1464.520434][T28187] validate_nla: 15 callbacks suppressed
[ 1464.520477][T28187] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1464.542903][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1464.548927][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1464.555278][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1464.561046][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:52:56 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000080000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:56 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x81, 0x4a, 0x3, 0x8, 0x2, 0x3, 0x5, 0x12d, 0x40, 0x290, 0x2, 0x0, 0x38, 0x1, 0xb7, 0x8001, 0x7}, [{0x2, 0x8, 0x80, 0xb054, 0x6138f316, 0x3, 0x5, 0x5f}, {0x6474e551, 0x8, 0x4, 0x3, 0x800, 0x6, 0x4, 0x8}], "325564396bf6aeb7ed7fda5620cf3de3bb9bed4b2dc9727d1e4c68795f1cd6d1ad3968c89beb6f19ffe63e72c1aa0b8d7b8558fed26882f403019aba0f1edefa49f1dbf6a3c247c1c82c28eae41f33bfc946eb37d237f875c3de2e373473cc2d5d5a5e2700429e240eea191b9fb965441b26c0bbc95306adfdaa0871bfa416ec70e729e5fd700a5f6976aa695c9afd9c58164b2125ddfb7a21c0e85fbfb2d7abe9793d231816a8f6180cbd84d9931ac40962ebd6f36bdba54f7a7048a3b4f32fba14cfef260c3f0a3af42a84196d389565927a", [[], [], [], [], [], [], [], []]}, 0x983)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$KVM_SMI(r1, 0xaeb7)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)

19:52:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1464.811090][T28193] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1464.839589][T28200] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:52:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:56 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6c00000000000000)

[ 1465.088355][T28306] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1465.135214][T28306] __nla_validate_parse: 16 callbacks suppressed
[ 1465.135303][T28306] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1465.166683][T28309] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:56 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00')
read$FUSE(r0, 0x0, 0x0)

[ 1465.204556][T28309] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1465.226671][   T25] audit: type=1800 audit(1572119576.984:603): pid=28278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16962 res=0
19:52:57 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x7400000000000000)

[ 1465.393981][   T25] audit: type=1800 audit(1572119577.124:604): pid=28189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17058 res=0
[ 1465.558918][   T25] audit: type=1800 audit(1572119577.134:605): pid=28316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17058 res=0
[ 1465.591043][T28324] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1465.612542][T28324] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:57 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x20, {0x0, 0x0, 0x2}}, 0x14)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x8f)

19:52:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:57 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000010000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080))
readv(r1, &(0x7f00000001c0), 0xce)

19:52:57 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x7a00000000000000)

[ 1465.835873][T28333] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1465.868274][T28333] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1465.920642][T28345] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1465.952986][T28345] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080))
readv(r1, &(0x7f00000001c0), 0xce)

19:52:57 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x9906000000000000)

[ 1466.086996][T28444] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1466.104465][T28444] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:57 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x8})
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1466.262921][   T25] audit: type=1800 audit(1572119578.014:606): pid=28441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16993 res=0
19:52:58 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1466.313261][T28452] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:52:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000))

19:52:58 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000020000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1466.370312][T28452] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1466.382835][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1466.382862][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1466.602572][T28465] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:58 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x9effffff00000000)

19:52:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x90)

19:52:58 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1466.891611][T28572] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:52:58 executing program 0:
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
timerfd_create(0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80802, 0x0)
write$sndseq(r0, &(0x7f0000000280)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30)

[ 1466.967835][T28578] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:52:58 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:58 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xc00e000000000000)

[ 1467.135769][   T25] audit: type=1800 audit(1572119578.894:607): pid=28570 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17137 res=0
[ 1467.190034][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
19:52:59 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000030000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:59 executing program 0:
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
timerfd_create(0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80802, 0x0)
write$sndseq(r0, &(0x7f0000000280)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30)

19:52:59 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2084}, 0x9ac2d9a2c7221ecc)
io_setup(0x2, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:52:59 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:52:59 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xf0ffffff00000000)

19:52:59 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)

19:52:59 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1467.816457][   T25] audit: type=1800 audit(1572119579.574:608): pid=28698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16962 res=0
19:52:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x91)

19:52:59 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xffffff7f00000000)

19:52:59 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000040000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:52:59 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:00 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x12, &(0x7f0000000080)={0x0, @local, 0x0, 0x0, 'n\x00'}, 0x2c)

19:53:00 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xffffffff00000000)

19:53:00 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1468.649764][   T25] audit: type=1800 audit(1572119580.404:609): pid=28738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17026 res=0
19:53:00 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(r0, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x2, 0x375b, 0x7, 0x0, 0x4})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r3 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r2, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:00 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000020000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x92)

19:53:00 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)

19:53:00 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:00 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000070000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:01 executing program 5:
r0 = socket$kcm(0x10, 0x5, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003})
write$P9_RREADLINK(r2, &(0x7f0000000840)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10)
ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100))
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000500fcb711407f480f0001000300000002000000f88000f01700", 0x20}], 0x1}, 0x0)

19:53:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:01 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000020000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1469.583289][   T25] audit: type=1800 audit(1572119581.344:610): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17345 res=0
19:53:01 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xff)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000140), 0x4)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000180)=0x4)

[ 1469.660308][T28887] validate_nla: 14 callbacks suppressed
[ 1469.660323][T28887] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:53:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f017ff", 0x2e}], 0x1}, 0x0)

[ 1469.886938][T28894] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1469.973723][T28900] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:53:02 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9000000000, 0x600002)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:02 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000090000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:02 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x93)

19:53:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:02 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000020000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1470.521303][T29014] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1470.587570][T29014] __nla_validate_parse: 14 callbacks suppressed
[ 1470.587585][T29014] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1470.666038][T28899] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f017ff", 0x2e}], 0x1}, 0x0)

[ 1470.722336][T28899] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:02 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000070000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1470.782829][    C1] net_ratelimit: 6 callbacks suppressed
[ 1470.782844][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1470.794348][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1470.800181][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1470.805988][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1470.880394][T29126] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1470.897840][T29126] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1470.947310][   T25] audit: type=1800 audit(1572119582.704:611): pid=29122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17487 res=0
19:53:02 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000a0000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1471.320013][T29236] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:53:03 executing program 0:
r0 = socket$kcm(0x10, 0x5, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003})
write$P9_RREADLINK(r2, &(0x7f0000000840)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10)
ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100))
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000500fcb711407f480f0001000300000002000000f88000f01700", 0x20}], 0x1}, 0x0)

[ 1471.371415][T29236] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:03 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x200, 0x10800)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x400000000000010b, 0xdc})
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd30, &(0x7f00000000c0), 0x1}, 0x0)

19:53:03 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x94)

[ 1471.743112][   T25] audit: type=1800 audit(1572119583.504:612): pid=29240 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17501 res=0
19:53:03 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd6, 0x88200)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r1, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0177f", 0x2e}], 0x1}, 0x0)

19:53:03 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000e0000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:03 executing program 5:
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000000)={0x9, 0x9, {0x53, 0xfffd, 0x7, {0x9, 0x3}, {0x0, 0x7}, @ramp={0x9, 0x1942, {0x8, 0x7, 0x1, 0x1}}}, {0x51, 0x2, 0x4, {0x0, 0x2}, {0x974, 0x3}, @rumble={0x1, 0xe1f8}}})
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000f0f000/0x3000)=nil, &(0x7f0000eb3000/0x1000)=nil, &(0x7f0000000140)="03796ae544140419988e98d0630ee1341ad0e31496256680478bc001e58c3b41cf0e354eea4732f4603608e2d612a2f6a3a3e4e88a872e35cc16a740f51804ad0bc9555226e147798c6c7bf5b5e60b4b89c29e257134242103e55dbb63f1105496b3df9f98eff63b14976e6aaf25df80027f192e1a01fe8cbce9ecd9ca01405584d2a16cdea2390ce5398631348ff332631c8008b94f61f181406b11d5", 0x9d, r1}, 0x68)

19:53:03 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xff)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000140), 0x4)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000180)=0x4)

[ 1472.062963][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1472.068788][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1472.074626][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1472.080473][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1472.118276][T29265] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1472.137662][T29265] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1472.155316][T29262] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1472.184744][T29262] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1472.237809][T29264] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1472.253416][T29264] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:04 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xff)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000140), 0x4)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000180)=0x4)

19:53:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f0179e", 0x2e}], 0x1}, 0x0)

[ 1472.592552][T29378] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1472.618148][T29381] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1472.627527][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1472.627576][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:53:04 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000f0000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f017f0", 0x2e}], 0x1}, 0x0)

19:53:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x95)

[ 1472.940530][T29488] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:05 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10001, 0x40)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x10, 0x8, 0x3, "60b99323a7549312e902cb97a4fadbea080e25f5a85bbff487ac81a7c8c497fa", 0x58552042})
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1473.369855][   T25] audit: type=1800 audit(1572119585.124:613): pid=29494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17492 res=0
19:53:05 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x400)
fallocate(r3, 0x2, 0x100000001, 0x7fff)

19:53:05 executing program 0:
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000000)={0x9, 0x9, {0x53, 0xfffd, 0x7, {0x9, 0x3}, {0x0, 0x7}, @ramp={0x9, 0x1942, {0x8, 0x7, 0x1, 0x1}}}, {0x51, 0x2, 0x4, {0x0, 0x2}, {0x974, 0x3}, @rumble={0x1, 0xe1f8}}})
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000f0f000/0x3000)=nil, &(0x7f0000eb3000/0x1000)=nil, &(0x7f0000000140)="03796ae544140419988e98d0630ee1341ad0e31496256680478bc001e58c3b41cf0e354eea4732f4603608e2d612a2f6a3a3e4e88a872e35cc16a740f51804ad0bc9555226e147798c6c7bf5b5e60b4b89c29e257134242103e55dbb63f1105496b3df9f98eff63b14976e6aaf25df80027f192e1a01fe8cbce9ecd9ca01405584d2a16cdea2390ce5398631348ff332631c8008b94f61f181406b11d5", 0x9d, r1}, 0x68)

19:53:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:05 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:05 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000100000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:05 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(r0, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1})
r2 = accept4$rose(r1, 0x0, &(0x7f0000000000), 0x80000)
ioctl$sock_proto_private(r2, 0x89eb, &(0x7f0000000040)="8827f9a0c0f71a8d9036d76841a3486d112f1486281ee7b3637c09ac38d602cf72b61423fa421204d4e0910d51582275e19fbaa909cfe83fbfcf9d9118092511ce5440427c4474d7448c6c1a95f84df36a63f7f656ac401639294c95d1512440ba1c484374dbc01035a2f81835a69895627f96864d83")
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:05 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x96)

[ 1474.122030][   T25] audit: type=1800 audit(1572119585.874:614): pid=29603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17499 res=0
19:53:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:06 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000110000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:06 executing program 0:
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000000)={0x9, 0x9, {0x53, 0xfffd, 0x7, {0x9, 0x3}, {0x0, 0x7}, @ramp={0x9, 0x1942, {0x8, 0x7, 0x1, 0x1}}}, {0x51, 0x2, 0x4, {0x0, 0x2}, {0x974, 0x3}, @rumble={0x1, 0xe1f8}}})
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000f0f000/0x3000)=nil, &(0x7f0000eb3000/0x1000)=nil, &(0x7f0000000140)="03796ae544140419988e98d0630ee1341ad0e31496256680478bc001e58c3b41cf0e354eea4732f4603608e2d612a2f6a3a3e4e88a872e35cc16a740f51804ad0bc9555226e147798c6c7bf5b5e60b4b89c29e257134242103e55dbb63f1105496b3df9f98eff63b14976e6aaf25df80027f192e1a01fe8cbce9ecd9ca01405584d2a16cdea2390ce5398631348ff332631c8008b94f61f181406b11d5", 0x9d, r1}, 0x68)

19:53:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1474.631521][   T25] audit: type=1800 audit(1572119586.384:615): pid=29634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17494 res=0
[ 1474.730138][T29654] validate_nla: 14 callbacks suppressed
[ 1474.730158][T29654] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1474.777712][T29655] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:53:06 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x8, 0xa, 0x80)

19:53:06 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000000)=0xe8)
keyctl$get_persistent(0x16, r1, 0x0)

19:53:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:06 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000115a290000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1475.070913][T29761] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1475.152906][T29766] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1475.190043][T29761] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x97)

19:53:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:07 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2ece1e49285178dc0000001e000503ed0080637e6394f2019682543b27400001000300000002d15e00f88000f0170000", 0xb8771c4a68eaeecf}], 0x1, 0x0, 0xfffffea9}, 0x9d521e16b2c44382)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400000, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)={0x2, 0x9})
socket$kcm(0x29, 0x2, 0x0)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8, 0x41000)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x202, 0x80000000, 0x10001, <r2=>0x0}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0xffff0000, 0x5a4b, 0x400}, 0x10)
pipe(&(0x7f0000000200))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
r6 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r6, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r7=>0x0})
recvmmsg(r6, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r7+30000000})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r6})
modify_ldt$read_default(0x2, &(0x7f0000000300)=""/139, 0x8b)

[ 1475.411148][T29780] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:53:07 executing program 0:
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000000)={0x9, 0x9, {0x53, 0xfffd, 0x7, {0x9, 0x3}, {0x0, 0x7}, @ramp={0x9, 0x1942, {0x8, 0x7, 0x1, 0x1}}}, {0x51, 0x2, 0x4, {0x0, 0x2}, {0x974, 0x3}, @rumble={0x1, 0xe1f8}}})
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000f0f000/0x3000)=nil, &(0x7f0000eb3000/0x1000)=nil, &(0x7f0000000140)="03796ae544140419988e98d0630ee1341ad0e31496256680478bc001e58c3b41cf0e354eea4732f4603608e2d612a2f6a3a3e4e88a872e35cc16a740f51804ad0bc9555226e147798c6c7bf5b5e60b4b89c29e257134242103e55dbb63f1105496b3df9f98eff63b14976e6aaf25df80027f192e1a01fe8cbce9ecd9ca01405584d2a16cdea2390ce5398631348ff332631c8008b94f61f181406b11d5", 0x9d, r1}, 0x68)

19:53:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1475.745891][T29792] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1475.765540][T29792] __nla_validate_parse: 17 callbacks suppressed
[ 1475.765557][T29792] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1475.767527][   T25] audit: type=1800 audit(1572119587.514:616): pid=29785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17506 res=0
19:53:07 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000340000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1475.904670][T29884] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1475.927283][T29884] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:07 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000200))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r8=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x3f}, 0x10)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={<r9=>r8, 0x422}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e22, 0x800, @remote, 0xfff}}}, &(0x7f00000001c0)=0x84)

19:53:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1476.222916][    C0] net_ratelimit: 10 callbacks suppressed
[ 1476.222930][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1476.234420][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1476.240203][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1476.246021][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1476.306203][T29908] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1476.346656][T29908] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1476.370451][T29909] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1476.395971][T29909] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:08 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
r2 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r3=>0x0})
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000})
getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000000)=""/115, &(0x7f0000000100)=0x73)
io_setup(0x2, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000000, 0x0)

19:53:08 executing program 0:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x20, {0x0, 0x0, 0x2}}, 0x14)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x98)

19:53:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1476.505582][   T25] audit: type=1800 audit(1572119588.264:617): pid=29905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17425 res=0
19:53:08 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000002400000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1476.782839][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1476.782849][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1476.782903][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1476.788658][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1476.842392][T30027] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:08 executing program 0:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x20, {0x0, 0x0, 0x2}}, 0x14)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1477.022829][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1477.028666][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:53:08 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000200), 0x506e7a042b4ad7fa, 0x2}}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x2, 0x4, 0x8000, 0x5, 0xb0, 0x9, 0x394b, 0xe745}, &(0x7f0000000040)={0x80, 0x2, 0x5, 0xba9a, 0x0, 0x3e000, 0x2, 0xa09}, &(0x7f0000000080)={0x6, 0x4, 0x6, 0x4, 0x7, 0x401, 0x0, 0x100}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={0x80000000}, 0x8})

[ 1477.201596][T30040] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:09 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:09 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000080000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1477.431153][   T25] audit: type=1800 audit(1572119589.184:618): pid=30038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17492 res=0
19:53:09 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000005f0000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1477.583065][T30053] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:09 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x99)

[ 1477.654362][T30055] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1477.926956][T30055] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:10 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x2)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:10 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000080000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:10 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x50000, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x3, {{0x2, 0x4e20, @local}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x110)

19:53:10 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000003e80000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1478.536062][T30179] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:10 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000140)={0x0, @frame_sync})

19:53:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x9a)

19:53:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1478.987279][   T25] audit: type=1800 audit(1572119590.744:619): pid=30186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17524 res=0
19:53:10 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001e000503ed0080637e6394f20100d2580500fcb711407f480f0001000300000002001365f1c7c3b6dbcc8728ec0001198000f017006cd3031c3fd1316b7f51f12b2307247313b8f6675428ce7db770bd12025551991e95764bc52720ffaba70df07f768eda1fd5dab40433205af53bd757dfd9ef62e1438475e70b8214", 0xfffffffffffffdd2}], 0x1, 0x0, 0x11d}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$TCSBRKP(r1, 0x5425, 0x8000)

19:53:10 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000001f40000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:11 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000080000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1479.442980][   T25] audit: type=1800 audit(1572119591.184:620): pid=30308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17276 res=0
19:53:11 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x12)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x12}, 0xfffffcde)
r2 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r3=>0x0})
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000})
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:11 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5})
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000280))
setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0xfffffffc, 0x4c25, 0x3f, 0x7}, 0x10)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r7, 0x0, 0x0, 0x2000002)
fallocate(r6, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7})
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000001c0)={0xf, 0x3, 0x1f})

19:53:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6000000000000000)

19:53:11 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000028140004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1479.983015][T30425] validate_nla: 12 callbacks suppressed
[ 1479.983033][T30425] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1480.075355][T30435] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1480.114646][T30436] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
19:53:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x9b)

19:53:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:12 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x700000000000000)

[ 1480.446189][T30454] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1480.497684][T30456] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
19:53:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:12 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)="dc", 0x1, 0x83733d379ec778bb, 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x800, 0xa4000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000140))
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x3, "6b29ce"}, 0x4)

19:53:12 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000800004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1480.890621][T30463] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1480.922840][T30463] __nla_validate_parse: 11 callbacks suppressed
[ 1480.922857][T30463] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:12 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$inet_sctp(0x2, 0x2, 0x84)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'nr0\x00', 0x4}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1481.277116][T30577] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1481.310363][T30577] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:13 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240))
r4 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
recvmmsg(r4, &(0x7f0000000240), 0x4f, 0x100, &(0x7f0000000100)={0x0, 0x1c9c380})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x1f, 0x7, 0x9, 0xe3f2, 0x1}, 0x14)

19:53:13 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x400000000000000)

19:53:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x9c)

19:53:13 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.swap.current\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(r0, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1})
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000))
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1481.633139][T30585] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1481.669395][T30585] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1481.707096][T30590] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:53:13 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f017c0", 0x2e}], 0x1}, 0x0)

[ 1481.759639][T30590] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1481.824593][T30592] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1481.852916][T30592] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:13 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000104000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1481.956910][T30595] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
19:53:13 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000005f0000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1482.160466][T30606] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:14 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x40)

19:53:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1482.462941][    C0] net_ratelimit: 17 callbacks suppressed
[ 1482.462954][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1482.474459][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1482.536039][T30619] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1482.574397][   T25] audit: type=1800 audit(1572119594.334:621): pid=30618 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17485 res=0
19:53:14 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000204000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1482.638270][T30650] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:15 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000100)=0x5)
bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:15 executing program 5:
socket$kcm(0x10, 0x2, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
fallocate(r0, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1})
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)

19:53:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xe000000)

19:53:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:15 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x9d)

19:53:15 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000304000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1483.395834][T30741] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0xd000000)

19:53:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1483.689755][   T25] audit: type=1800 audit(1572119595.444:622): pid=30740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17556 res=0
19:53:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x8000000)

[ 1483.846564][   T25] audit: type=1800 audit(1572119595.604:623): pid=30749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17564 res=0
19:53:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:15 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x8004, 0x0, 0xb3ba6d1f1032f027)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0x0, 0x0, 0x401})
fsopen(&(0x7f0000000140)='mqueue\x00', 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040))
ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000000)={0x200, [0x4, 0x400, 0x1f, 0x5, 0x5, 0x8c, 0x9, 0x2, 0xfffd, 0x54e, 0x3ff, 0x6, 0x81, 0x1, 0xfffe, 0xfff, 0x8, 0x11f6, 0x80, 0xaa30, 0x8000, 0x0, 0x1000, 0x8, 0x1ff, 0x5, 0x1000, 0x4, 0x51c, 0x81, 0xfffd, 0x0, 0x3, 0xf8, 0x23, 0xf001, 0x40, 0x5, 0x9ea7, 0x4, 0x0, 0x3, 0x20, 0x2, 0x9, 0x3, 0x8f66, 0x2], 0x9})
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)='lo\x00', 0x0, 0x4e7, 0xfffa})

19:53:15 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000404000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1484.445099][   T25] audit: type=1800 audit(1572119596.204:624): pid=30761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17425 res=0
[ 1484.621424][   T25] audit: type=1800 audit(1572119596.374:625): pid=30773 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17569 res=0
[ 1484.727475][   T25] audit: type=1800 audit(1572119596.424:626): pid=30783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17569 res=0
19:53:16 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x9e)

19:53:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:16 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x6000000)

19:53:16 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x4}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:16 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0xf26, 0x0, 0x4, 0x4, 0x0, 0x80000000})
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r8=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x3f}, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0xad69, 0x4, 0x208, 0x3, 0x80, 0x1800, 0x2, 0xb5, <r9=>r8}, &(0x7f00000001c0)=0x20)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e22, 0xdf5d874, @empty, 0x1}}, 0x9, 0x3f}, &(0x7f0000000200)=0x90)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r10=>0x0})
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r10+30000000})
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1484.999641][T30794] validate_nla: 12 callbacks suppressed
[ 1484.999659][T30794] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:53:16 executing program 0:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000100)=0x5)
bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:16 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000704000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1485.102820][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1485.102830][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1485.102870][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1485.108632][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:53:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0xa}], 0x1}, 0x0)

[ 1485.342836][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1485.348656][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1485.354519][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1485.360293][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1485.437798][T30806] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0xf}], 0x1}, 0x0)

19:53:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x14}], 0x1}, 0x0)

19:53:17 executing program 0:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000100)=0x5)
bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:17 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0x9f)

[ 1485.993796][   T25] audit: type=1800 audit(1572119597.744:627): pid=30855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17601 res=0
19:53:17 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000904000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x25}], 0x1}, 0x0)

19:53:18 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x153, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503fd0080637e6394f20004d2000500fc00f88000f01700000000008c00"/46, 0x2e}], 0x1}, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x480, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r3=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x3f}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={<r4=>r3, @in={{0x2, 0x4e21, @multicast1}}, [0x4, 0x1000, 0xfffffffffffffffe, 0x3a0f, 0x8, 0x8b8f, 0x7, 0x634f, 0xffffffffdf0961f3, 0x101000000000, 0x3f, 0x8, 0x6, 0x81, 0x6]}, &(0x7f0000000040)=0x100)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4, 0xffffffe0}, 0x8)

19:53:18 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180)=0x7d, 0x4)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r1, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x30}], 0x1}, 0x0)

19:53:18 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x7b, 0x7d, 0x2, {0x0, 0x74, 0x4010, 0x4, {0x10, 0x4, 0x1}, 0x40000, 0x0, 0xb7f9, 0x9, 0x15, '/proc/self/attr/exec\x00', 0xc, 'eth0^(cpuset', 0xb, 'keyring\\(\\/', 0x15, '/proc/self/attr/exec\x00'}}, 0x7b)

19:53:18 executing program 0:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000100)=0x5)
bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1486.757801][   T25] audit: type=1800 audit(1572119598.514:628): pid=30935 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17561 res=0
[ 1486.869950][T31049] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1486.888875][T31049] __nla_validate_parse: 9 callbacks suppressed
[ 1486.888895][T31049] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1486.924058][T31053] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1486.932621][T31053] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:18 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000a04000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x5a}], 0x1}, 0x0)

[ 1486.971349][T31055] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1486.987278][T31055] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1487.125330][T31062] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1487.150456][T31062] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:18 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfd16, &(0x7f0000000500)=[{&(0x7f0000000000)="b34f5c2cb215da4ddea79322cc6ce7cbaeaf085b736f4d9b8da17c3176a2310955d0eb2cfee3c484894feacaa60c79"}, {&(0x7f0000000140)="0f7dbbf33df1d92ce9391365cfab695623212965d8840a492fdd2e879494673258769c4d790e0d17f433bd9bc52458245bbe36b77ab6de51454d3acd812f60ad19ffb208853f89dd8aede714f6e3f3cd85a6191a370000b647bf73e7fc4c31ad9a5329ca25b6fd297d459da062ecfc9b4fe39ced301925429896d557f20eae09bce8ab74092a0c3541b482d54a0af8499375c211c75acbbb837ef54d68d21cf5b61bd4fc4fd2afb39f331d22ce9c358d85a1418564267333b0397865e0581f95dccb5b69918824fa49be58562a95d299fa3a300f9acfc9265ecea9c9cd79c70265af29b4334fb53545c84a14ffe84c"}, {&(0x7f0000000040)="f56285d84f9fea8ef46ab584a80c0ea995c6e84aa7edd13b66a2ab9eeb349511602190ede79af750be75841c32a80a14648075a3b788244a6e41b902a2b3b315f8ffa3c0e7c0e4ad61bd56af8aba8c9e71625cce44d9ebb6b82b6e97d3f7226df0b0e0bf459f6b58220780d04ea6122ece"}, {&(0x7f0000000280)="15138a12850127de48f6737ec9037e703bc07c03dbbd96dc1ba90d4b0016"}, {&(0x7f0000000580)="05b73e59f54e1d05890a1eead04cf2e6c406176fb78d1f7c5169818dd4ef6a0a346dd02df11cf5d6fff21b8953e47f96f4420de49131862cbd094bbabe8b8f5ffa541c3942c4b5660e6f03f84c6bde54f7f4506da98d14"}, {&(0x7f0000000300)="78a0d150c4dc1666166cb440153edfb91ec72773557ab5665e4d56594c3edae28dda909a7b316b134b84cf436cb7a15a0992b46b82d487165c084ca6debc9d452b37f1e8d93d0d4b72c5b34c52bec906e5c453343a731042349d120f90b897f959265e6ba6a80288dcc277f2652ba8bc77917649e5af8aecebdc2f1447b850f17771710ec6b26710ba365f15d8814988485be42f3e701d648c100af1509fabcc9e62a4376c8fd4bd293ecd544a4aabf1b7550d68b1ab0f2684469a316263f2fa3f5a5092c6ab7f76e78b8136e6e61e2fa391c23141bd87e375dd612e"}, {&(0x7f0000000400)="7fbef1b2e92672c73c93a702356744f1b89a1a968e11a06d0fcb42118b8730f33a9ea1e2ee00766743027bcc160f892b7aa9fad032fededbc96f9cac3e1ea02cc6ce14ab1b41db21ce80964d571093fd4ec98927c247168594dd703bcc6deafc3ffa6b7eb006d2b724038d2171e87653739c1e469ff19525b9c07cf0bf8294734cdb30ce4b7ecde9d353fbf8decb14378d46c2f97a605dc3d7852c9426a6055fc5df452dabd66a51cb714f02a247f8f1c85658c990a4a37ec27a4bbf830f2240a1df72f1b7c938ab4e7427e0d318af6e55956bdc6c3ad13e"}], 0x1}, 0x537ea184b2d23387)

19:53:19 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa0)

19:53:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x67}], 0x1}, 0x0)

[ 1487.426621][T31172] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1487.457300][T31172] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:19 executing program 0:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x4}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0xc0}], 0x1}, 0x0)

19:53:19 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x1, "e67d708804e94bf18348473f795c5cb64c192cb35994f73f2e2fccd303063a2b", 0x2})
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1487.732959][   T25] audit: type=1800 audit(1572119599.484:629): pid=31170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17548 res=0
[ 1487.837485][T31186] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1487.863702][T31186] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1488.000723][T31189] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000e04000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1488.053166][T31189] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x1b3}], 0x1}, 0x0)

19:53:19 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0xffffff3c, 0x0, 0x0, 0x24d)
clock_gettime(0x7, &(0x7f0000000440)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000})
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4c401, 0x0)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r4 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={<r6=>0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x5, 0x7f, 0x800, 0xfffffffc, 0x2}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x30, &(0x7f0000000240)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}]}, &(0x7f0000000300)=0x10)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r7 = open(&(0x7f0000000600)='./bus\x00', 0x2e89c2, 0x2f)
r8 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r8, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r9=>0x0})
recvmmsg(r8, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r9+30000000})
ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000100))
write$P9_RATTACH(r7, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r3, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000000), 0x1d3}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x7)

[ 1488.210862][   T25] audit: type=1800 audit(1572119599.964:630): pid=31188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17793 res=0
[ 1488.240509][T31299] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1488.257710][T31299] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:20 executing program 0:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x4}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:20 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1000000000000140}, 0x0)

19:53:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0xec0}], 0x1}, 0x0)

19:53:20 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa1)

19:53:20 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e20, @multicast2}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000001c0)={0xedb5, 0x194})
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x6, 0x0)
fallocate(r3, 0x4, 0x6, 0x8001)
fallocate(r2, 0x0, 0x0, 0x2000002)
clock_settime(0x3, &(0x7f0000000280)={0x0, 0x989680})
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
r5 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x72, 0x6, 0x0, 0x5, 0x0, 0x40, 0x40000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf9c, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x13a48, 0x7, 0x8, 0x8, 0xffffffffffff8000, 0x54d3, 0xd36d}, 0xffffffffffffffff, 0x2, r2, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000080)=0xffffffffffffffff)

[ 1488.724709][T31317] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
19:53:20 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000140)={0x4})
creat(&(0x7f0000000200)='./bus\x00', 0x8)
r3 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r4=>0x0)
ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000100))
statfs(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)=""/103)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r6=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r6, 0x3f}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={<r7=>r6, 0x3f}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={r7, 0x86, "3ad7a224fade6be8279b424241dd91cdb6b30955f56e69fd1bf33ad936b5b43b8281aa38fca98ac91b5949d1d86153f1f0f156c44bf0733ba94c8839947b8eab8ea5d31ed344d2614af831cbd160c77c1f60b131821617eb5e8b45cc2bb1dba64386b11128174ba2b5e6457251334f911fd863625c2362506b842ce54f30af23c17c48c56e4a"}, &(0x7f00000003c0)=0x8e)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000001c0)=0x6)

[ 1488.829431][   T25] audit: type=1800 audit(1572119600.584:631): pid=31305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17857 res=0
19:53:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x33fe0}], 0x1}, 0x0)

[ 1488.927406][T31400] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:20 executing program 0:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x4}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:20 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000f04000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1489.262824][    C0] net_ratelimit: 4 callbacks suppressed
[ 1489.262839][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1489.262851][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1489.280251][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:53:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2000012e}], 0x1}, 0x0)

[ 1489.375424][   T25] audit: type=1800 audit(1572119601.134:632): pid=31424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17493 res=0
19:53:21 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0xf26, 0x0, 0x4, 0x4, 0x0, 0x80000000})
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r8=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x3f}, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0xad69, 0x4, 0x208, 0x3, 0x80, 0x1800, 0x2, 0xb5, <r9=>r8}, &(0x7f00000001c0)=0x20)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e22, 0xdf5d874, @empty, 0x1}}, 0x9, 0x3f}, &(0x7f0000000200)=0x90)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r10=>0x0})
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r10+30000000})
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1489.502824][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1489.508668][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1489.514498][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1489.520249][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:53:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2)
getpeername$llc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x4, @mcast2, 0x6}], 0x1c)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000140)={0x400, 0x8001, [0xffff, 0x3, 0x2, 0x1, 0xb789], 0xded})

19:53:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x7ffff000}], 0x1}, 0x0)

[ 1489.731403][   T25] audit: type=1800 audit(1572119601.484:633): pid=31547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17921 res=0
19:53:21 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa2)

19:53:21 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000001004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0xfffffdef}], 0x1}, 0x0)

[ 1490.150740][   T25] audit: type=1800 audit(1572119601.904:634): pid=31661 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17574 res=0
19:53:22 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x6d}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)

19:53:22 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x102, {0x0, 0x0, 0x8}}, 0xffffffffffffffd6)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x2}, 0x0)

19:53:22 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0xf26, 0x0, 0x4, 0x4, 0x0, 0x80000000})
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r8=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x3f}, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0xad69, 0x4, 0x208, 0x3, 0x80, 0x1800, 0x2, 0xb5, <r9=>r8}, &(0x7f00000001c0)=0x20)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e22, 0xdf5d874, @empty, 0x1}}, 0x9, 0x3f}, &(0x7f0000000200)=0x90)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r10=>0x0})
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r10+30000000})
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:22 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
getsockopt(r1, 0x6, 0xd9c, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41)

19:53:22 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000001104000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1490.782845][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1490.788635][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1490.794461][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1490.815135][T31681] validate_nla: 4 callbacks suppressed
[ 1490.815154][T31681] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1490.886927][T31684] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x4}, 0x0)

19:53:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa3)

[ 1491.222376][T31797] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
19:53:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x8}, 0x0)

[ 1491.356224][   T25] audit: type=1800 audit(1572119603.114:635): pid=31689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17793 res=0
[ 1491.508880][   T25] audit: type=1800 audit(1572119603.264:636): pid=31795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16516 res=0
19:53:23 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x100)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x600142, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x9}, 0x0)

19:53:23 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460000000401800000000000000000115a2904000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:23 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0xf26, 0x0, 0x4, 0x4, 0x0, 0x80000000})
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000002)
fallocate(r5, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r8=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x3f}, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0xad69, 0x4, 0x208, 0x3, 0x80, 0x1800, 0x2, 0xb5, <r9=>r8}, &(0x7f00000001c0)=0x20)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e22, 0xdf5d874, @empty, 0x1}}, 0x9, 0x3f}, &(0x7f0000000200)=0x90)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r10=>0x0})
recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r10+30000000})
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1491.725731][T31709] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x25}, 0x0)

19:53:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x5a}, 0x0)

[ 1492.201127][   T25] audit: type=1800 audit(1572119603.954:637): pid=31818 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17573 res=0
19:53:24 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000003404000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:24 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000000)={0x0, 0xe8ce, 0xffff})

19:53:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa4)

19:53:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x63}, 0x0)

[ 1492.805704][T31946] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1492.842845][T31946] __nla_validate_parse: 6 callbacks suppressed
19:53:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x67}, 0x0)

[ 1492.842860][T31946] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x6d}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)

19:53:25 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x90, 0x0, 0x1}}, 0x14)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:25 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000024004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x300}, 0x0)

19:53:25 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000200)={0x63a890939f9d9d8a, 0x100, 0x1, {0xfffffffb, 0xe5, 0x34e, 0x10000}})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff80000000, 0x340000)
r3 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r4=>0x0})
recvmmsg(r3, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
r6 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r6, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240))
clock_gettime(0x0, &(0x7f0000000280))
clock_gettime(0x0, &(0x7f0000000780)={<r7=>0x0, <r8=>0x0})
recvmmsg(r6, &(0x7f0000000700)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000480)=""/112, 0x70}], 0x10000065, &(0x7f0000000540)=""/152, 0x98}, 0xc6ac}, {{&(0x7f0000000600)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=""/3, 0x3}, 0x9}], 0x2, 0x0, &(0x7f0000002a80)={r7, r8+30000000})
r9 = socket$inet(0x2, 0x800, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r9, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r10=>0x0})
recvmmsg(r9, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000002a80)={0x0, r10+30000000})
r11 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r11, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r11, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r12=>0x0})
recvmmsg(r11, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r12+30000000})
ppoll(&(0x7f0000000080)=[{r3, 0x2}, {0xffffffffffffffff, 0x2}, {r6, 0x28}, {r1, 0x13}, {r9, 0x8220}, {r11}], 0x6, &(0x7f0000000140), &(0x7f0000000180)={0x1ff}, 0x8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @empty, 0x4}, 0xfffffd39)

19:53:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x6d}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)

19:53:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x7ffffff2}, 0x0)

[ 1493.622408][T32075] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1493.663106][T32075] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:25 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa5)

19:53:25 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/178, &(0x7f0000000180)=0xb2)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000040)=""/25)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_submit(0x0, 0x0, &(0x7f0000000540))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1493.695247][   T25] audit: type=1800 audit(1572119605.454:638): pid=32066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16851 res=0
[ 1493.835405][T32075] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x7ffffff8}, 0x0)

[ 1493.913096][T32075] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:25 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000005f04000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:25 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x41000, 0x0)
ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040))
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

19:53:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x7ffffff9}, 0x0)

[ 1494.287547][T32207] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1494.312887][T32207] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x6d}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)

19:53:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x2}, 0x0)

19:53:26 executing program 5:
fsopen(&(0x7f0000000080)='jffs2\x00', 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/cont\xa5omC#\x00', 0x4, 0x400000)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040))

[ 1494.653523][   T25] audit: type=1800 audit(1572119606.414:639): pid=32219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16689 res=0
19:53:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x3}, 0x0)

[ 1494.724598][T32325] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1494.732715][T32325] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000024004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:26 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000000000003e804000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:26 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa6)

19:53:26 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:26 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r1, 0x4)

19:53:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x4}, 0x0)

19:53:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x5}, 0x0)

[ 1495.348144][T32378] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1495.362874][T32378] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1495.403900][T32378] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1495.502845][    C1] net_ratelimit: 14 callbacks suppressed
[ 1495.502860][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1495.502870][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1495.520759][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:53:27 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x28002, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x4)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x80, 0x8)

19:53:27 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000000000001f404000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:27 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000024004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x6}, 0x0)

[ 1495.742832][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1495.748796][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1495.754635][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1495.760422][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1495.895896][T32472] validate_nla: 1 callbacks suppressed
[ 1495.895914][T32472] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1495.930123][T32472] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x7}, 0x0)

[ 1495.951702][T32472] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1495.988534][T32472] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:27 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x80}, 0x0)

19:53:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xa}, 0x0)

19:53:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa7)

19:53:28 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:28 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000004018000000000000000ffffffff04000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000024004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:28 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x600083, 0x40)
dup3(0xffffffffffffffff, r1, 0x80000)

19:53:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xe}, 0x0)

[ 1496.731391][T32601] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xf}, 0x0)

[ 1496.772615][T32601] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1496.809594][T32601] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:28 executing program 5:
r0 = socket$kcm(0x10, 0xa, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, 0xfffffffffffffca4}, 0x0)

19:53:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x48}, 0x0)

[ 1497.022892][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1497.028704][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1497.034559][    C0] protocol 88fb is buggy, dev hsr_slave_0
19:53:28 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100))
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0)
r4 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000})
splice(r4, 0x0, r3, 0x0, 0x0, 0x0)

19:53:28 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000001e000503e2c23a683eef221cd4ed0080637e6394f201efd2000700fcb75fcf7f480f0001000300000002000000f88000f01700", 0x37}], 0x1}, 0x800)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="935f8b6942bd45e71b9fcc5c45ac28da326e85580f3b78de99254205b141f091ae86711015cff2e52fb295b66fb865072f3b4acb804db65c0b099475f7fdc76058b304379b497342d596780e89c880c61db24182edac30942b5ff5f3cb865fa77d19bde72d52d37601f724334d71528a2bb9ca28e014d54bef112cfeba5bf905f623cb440eb0b780ae", 0x89)

19:53:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x4c}, 0x0)

19:53:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa8)

19:53:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000000)={0x0, 0xe8ce, 0xffff})

19:53:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000ffffffffffffffff04000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x60}, 0x0)

19:53:29 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
exit(0x3)

[ 1497.744303][T32745] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1497.781761][T32749] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
19:53:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x68}, 0x0)

19:53:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x6c}, 0x0)

19:53:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x4000000)

[ 1498.171951][   T25] audit: type=1800 audit(1572119609.924:640): pid=387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17010 res=0
19:53:30 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000001000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1498.417151][  T396] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 1498.447919][  T396] __nla_validate_parse: 3 callbacks suppressed
[ 1498.447942][  T396] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1498.586950][  T401] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1498.599056][  T401] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1498.848669][   T25] audit: type=1800 audit(1572119610.604:641): pid=406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17010 res=0
19:53:30 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4})
getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r5 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r6=>0x0})
recvmmsg(r5, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000})
ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @broadcast}, 0x1a, 0x0, 0x0, 0x0, 0xde, 0x0, 0x7fffffff, 0x1, 0x1})

19:53:30 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000020000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x74}, 0x0)

19:53:30 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xfffffffffffffc91}, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x40, 0x3, &(0x7f0000000280)=[{&(0x7f0000000140)="042fec7d8c9271d90602dee20dbf14d81c57a5c7c830f22f7c266ac79501d1f02a6751544d0165b15a604031f88710897aa232fdb68ea523f099fc3cfedd852ef549023a23ff283549855da01d9f1c33c27551c47c868f9abcee9c41", 0x5c, 0x20}, {&(0x7f0000000080)="9fb917ab6d6e365a67e8541b72cf541fb240a6dad125b29c0f38c75348162bbba5", 0x21, 0x80}, {&(0x7f00000001c0)="62d434fcdd0e894bf78daa088b34665987420673e78af08c7fb1beed61a51ed5e5", 0x21, 0x2}], 0x8000, 0x0)

19:53:30 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xa9)

19:53:30 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000002000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x7a}, 0x0)

19:53:31 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000280)=0x14, 0x800)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @empty, r2}, 0xc)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1499.741803][   T25] audit: type=1800 audit(1572119611.494:642): pid=535 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17586 res=0
19:53:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x300}, 0x0)

19:53:31 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000003000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1499.909294][  T542] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1499.933778][  T542] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:31 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000020000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1499.975913][  T545] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1499.986177][  T545] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:31 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000001340)={&(0x7f0000000000)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000000080)}, 0x80)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vcs\x00', 0x28c300, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000013c0), &(0x7f0000001400)=0x4)
rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x101, 0x7, 0x100000001}, 0x4}, 0x20, 0x1, 0x0)

[ 1500.377454][  T560] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1500.438770][  T565] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'.
19:53:32 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
fcntl$getown(r2, 0x9)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000300)="6e9a0c063b9e510c8d65addc449fce1182be65d4c35f359b875020cd77da32375f995f2c1544dbdf1a4c3527c2391ed599a47e3f32babd1188e31d9ea8d9acac50b8d5d3bfaa312a768b676c91047f8b5cc7fbb59655b7a8e7ffe456cdc93da85187e14a6494ebe58655ed90a8813de894027caa32d75832eacfb305194f5da7b54742022c254a0503d96f5d39030e9f246ef1426aa8f9a948431f55934d509af60ddd110e7bf8fd8a839e4b423c36656ed3b47746dfad270caefc3109116c33b0eef3ab5170a0fe1322ad3d86f28dba58a61e225ccd0b06045ce9cda4ba2f58285cd190efb4bec0e297ade34300feb20ad8aaf7aab0be5e5a6fa8b904fb188ca4078c3197d04cf7712df7b6", 0x10c, 0x0, 0x0, 0x2}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xaa)

19:53:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x500}, 0x0)

19:53:32 executing program 5:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/53)

19:53:32 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000020000000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000200000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$inet(0x2, 0x4000000000000801, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x24d)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000})
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x7530}, 0x10)
pwrite64(r1, &(0x7f0000000000), 0x0, 0x4b)

19:53:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x600}, 0x0)

19:53:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0x700}, 0x0)

[ 1501.182893][    C0] net_ratelimit: 9 callbacks suppressed
[ 1501.182909][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1501.194363][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1501.200150][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1501.205964][    C0] protocol 88fb is buggy, dev hsr_slave_1
19:53:33 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000002000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

[ 1501.427961][   T25] audit: type=1800 audit(1572119613.184:643): pid=792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17598 res=0
19:53:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xa00}, 0x0)

19:53:33 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000300000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:34 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write(r0, &(0x7f0000000000)="bc", 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc})
readv(r4, &(0x7f00000001c0), 0xab)

19:53:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xaf5}, 0x0)

19:53:34 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000002000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:34 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x2, &(0x7f00000004c0)=<r2=>0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r4, 0xf01}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x25000024}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xb0, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x59}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x48810)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

19:53:34 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
statfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/67)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000002)
fallocate(r2, 0x0, 0x0, 0x10ffff)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3})
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000040180000000000400000000000004000000000000000000004000000000000000000000000000000000000000130438000200000000007f0000000000080000000000000000000000030000000000000077680000000000"], 0x5f)

19:53:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1, 0x0, 0xe00}, 0x0)

19:53:34 executing program 5:
socket$kcm(0x10, 0x2, 0x10)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x6, 0x4, 0x3, 0x8})
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400880, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080))

[ 1502.782940][    C1] ==================================================================
[ 1502.791100][    C1] BUG: KCSAN: data-race in __neigh_event_send / neigh_resolve_output
[ 1502.799148][    C1] 
[ 1502.801482][    C1] write to 0xffff88810014f085 of 1 bytes by interrupt on cpu 0:
[ 1502.809120][    C1]  __neigh_event_send+0x186/0x970
[ 1502.814146][    C1]  neigh_resolve_output+0x353/0x480
[ 1502.819514][    C1]  ip_finish_output2+0x4af/0xe40
[ 1502.824442][    C1]  __ip_finish_output+0x23a/0x490
[ 1502.829979][    C1]  ip_finish_output+0x41/0x160
[ 1502.834734][    C1]  ip_output+0xdf/0x210
[ 1502.838885][    C1]  ip_local_out+0x74/0x90
[ 1502.843206][    C1]  __ip_queue_xmit+0x3a8/0xa40
[ 1502.847960][    C1]  ip_queue_xmit+0x45/0x60
[ 1502.852367][    C1]  __tcp_transmit_skb+0xe81/0x1d60
[ 1502.857480][    C1]  tcp_xmit_probe_skb+0x19b/0x1d0
[ 1502.862494][    C1]  tcp_write_wakeup+0x287/0x3b0
[ 1502.868027][    C1]  tcp_send_probe0+0x3a/0x286
[ 1502.872779][    C1]  tcp_write_timer_handler+0x48e/0x510
[ 1502.878224][    C1] 
[ 1502.880559][    C1] read to 0xffff88810014f085 of 1 bytes by interrupt on cpu 1:
[ 1502.888097][    C1]  neigh_resolve_output+0x91/0x480
[ 1502.893212][    C1]  ip_finish_output2+0x4af/0xe40
[ 1502.898135][    C1]  __ip_finish_output+0x23a/0x490
[ 1502.903146][    C1]  ip_finish_output+0x41/0x160
[ 1502.907899][    C1]  ip_output+0xdf/0x210
[ 1502.912047][    C1]  ip_local_out+0x74/0x90
[ 1502.916370][    C1]  __ip_queue_xmit+0x3a8/0xa40
[ 1502.921130][    C1]  ip_queue_xmit+0x45/0x60
[ 1502.925537][    C1]  __tcp_transmit_skb+0xe81/0x1d60
[ 1502.930642][    C1]  tcp_xmit_probe_skb+0x19b/0x1d0
[ 1502.935663][    C1]  tcp_write_wakeup+0x287/0x3b0
[ 1502.940512][    C1]  tcp_send_probe0+0x3a/0x286
[ 1502.945180][    C1]  tcp_write_timer_handler+0x48e/0x510
[ 1502.950617][    C1] 
[ 1502.952931][    C1] Reported by Kernel Concurrency Sanitizer on:
[ 1502.959081][    C1] CPU: 1 PID: 7431 Comm: udevd Not tainted 5.4.0-rc3+ #0
[ 1502.966175][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1502.976226][    C1] ==================================================================
[ 1502.984279][    C1] Kernel panic - not syncing: panic_on_warn set ...
[ 1502.990867][    C1] CPU: 1 PID: 7431 Comm: udevd Not tainted 5.4.0-rc3+ #0
[ 1502.997880][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1503.007923][    C1] Call Trace:
[ 1503.011199][    C1]  <IRQ>
[ 1503.014056][    C1]  dump_stack+0xf5/0x159
[ 1503.018313][    C1]  panic+0x210/0x640
[ 1503.022214][    C1]  ? __tcp_transmit_skb+0xe81/0x1d60
[ 1503.027497][    C1]  ? vprintk_func+0x8d/0x140
[ 1503.032088][    C1]  kcsan_report.cold+0xc/0x10
[ 1503.036761][    C1]  __kcsan_setup_watchpoint+0x32e/0x4a0
[ 1503.042299][    C1]  __tsan_read1+0x2c/0x30
[ 1503.046618][    C1]  neigh_resolve_output+0x91/0x480
[ 1503.051722][    C1]  ? __rcu_read_unlock+0x66/0x3c0
[ 1503.056732][    C1]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1503.062363][    C1]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1503.068244][    C1]  ip_finish_output2+0x4af/0xe40
[ 1503.073168][    C1]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1503.079052][    C1]  __ip_finish_output+0x23a/0x490
[ 1503.084063][    C1]  ? __tsan_write4+0x32/0x40
[ 1503.088640][    C1]  ip_finish_output+0x41/0x160
[ 1503.093390][    C1]  ip_output+0xdf/0x210
[ 1503.097532][    C1]  ? __ip_finish_output+0x490/0x490
[ 1503.102718][    C1]  ip_local_out+0x74/0x90
[ 1503.107056][    C1]  __ip_queue_xmit+0x3a8/0xa40
[ 1503.111823][    C1]  ip_queue_xmit+0x45/0x60
[ 1503.116226][    C1]  __tcp_transmit_skb+0xe81/0x1d60
[ 1503.121335][    C1]  tcp_xmit_probe_skb+0x19b/0x1d0
[ 1503.126350][    C1]  tcp_write_wakeup+0x287/0x3b0
[ 1503.131194][    C1]  tcp_send_probe0+0x3a/0x286
[ 1503.135860][    C1]  tcp_write_timer_handler+0x48e/0x510
[ 1503.141305][    C1]  tcp_write_timer+0xd1/0xf0
[ 1503.145884][    C1]  ? tcp_write_timer_handler+0x510/0x510
[ 1503.151507][    C1]  call_timer_fn+0x5f/0x2f0
[ 1503.156009][    C1]  ? tcp_write_timer_handler+0x510/0x510
[ 1503.161626][    C1]  ? tcp_write_timer_handler+0x510/0x510
[ 1503.167261][    C1]  run_timer_softirq+0xcb8/0xd20
[ 1503.172190][    C1]  ? sched_clock+0x34/0x40
[ 1503.176591][    C1]  ? sched_clock_cpu+0x15/0xe0
[ 1503.181341][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1503.187568][    C1]  __do_softirq+0x115/0x33f
[ 1503.192062][    C1]  irq_exit+0xbb/0xe0
[ 1503.196039][    C1]  smp_apic_timer_interrupt+0xe6/0x280
[ 1503.201495][    C1]  ? smp_reschedule_interrupt+0x71/0x1d0
[ 1503.207120][    C1]  apic_timer_interrupt+0xf/0x20
[ 1503.212036][    C1]  </IRQ>
[ 1503.214966][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4b/0x50
[ 1503.221117][    C1] Code: 90 08 0a 00 00 83 fa 02 75 20 48 8b 88 10 0a 00 00 8b 80 0c 0a 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 <5d> c3 0f 1f 00 65 4c 8b 04 25 40 6c 01 00 65 8b 05 c8 a3 bb 7e a9
[ 1503.240791][    C1] RSP: 0018:ffffc90001a3fa08 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
[ 1503.249190][    C1] RAX: ffff8880a6331080 RBX: ffffc90001a3fa58 RCX: ffffffff82314ca7
[ 1503.257146][    C1] RDX: 0000000000000000 RSI: ffffffff82313452 RDI: ffff8881256c7580
[ 1503.262878][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1503.265118][    C1] RBP: ffffc90001a3fa08 R08: ffff8880a6331080 R09: 00008881256c759b
[ 1503.270871][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1503.279397][    C1] R10: 00000000aaaaaaab R11: ffffffff86045c50 R12: ffff8881256c7580
[ 1503.279407][    C1] R13: 000000000000023a R14: ffff8881256c7580 R15: 0000000000000000
[ 1503.279431][    C1]  ? tomoyo_domain_quota_is_ok+0x257/0x2b0
[ 1503.279448][    C1]  ? __read_once_size.constprop.0+0x12/0x20
[ 1503.279489][    C1]  __read_once_size.constprop.0+0x12/0x20
[ 1503.285292][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1503.293149][    C1]  tomoyo_domain_quota_is_ok+0xc5/0x2b0
[ 1503.293168][    C1]  tomoyo_supervisor+0x22b/0xd20
[ 1503.293198][    C1]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1503.301169][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1503.306929][    C1]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1503.306945][    C1]  ? __tsan_write1+0x32/0x40
[ 1503.306973][    C1]  ? tomoyo_compare_name_union+0xa0/0xa0
[ 1503.361775][    C1]  tomoyo_path_permission+0x121/0x160
[ 1503.367139][    C1]  tomoyo_path_perm+0x23e/0x390
[ 1503.371996][    C1]  tomoyo_inode_getattr+0x26/0x40
[ 1503.377007][    C1]  security_inode_getattr+0x9b/0xd0
[ 1503.382192][    C1]  vfs_getattr+0x2e/0x70
[ 1503.386419][    C1]  vfs_statx+0x102/0x190
[ 1503.390650][    C1]  __do_sys_newlstat+0x51/0xb0
[ 1503.395399][    C1]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1503.401017][    C1]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1503.407156][    C1]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[ 1503.412779][    C1]  ? __tsan_read8+0x2c/0x30
[ 1503.417395][    C1]  __x64_sys_newlstat+0x3a/0x50
[ 1503.422268][    C1]  do_syscall_64+0xcc/0x370
[ 1503.426765][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1503.432650][    C1] RIP: 0033:0x7f74830ecd05
[ 1503.437066][    C1] Code: f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 90 90 83 ff 01 48 89 f0 77 18 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 17 f3 c3 90 48 8b 05 01 51 2b 00 64 c7 00 16
[ 1503.456674][    C1] RSP: 002b:00007ffcf61388f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
[ 1503.465078][    C1] RAX: ffffffffffffffda RBX: 00000000017243a0 RCX: 00007f74830ecd05
[ 1503.473043][    C1] RDX: 00007ffcf6138940 RSI: 00007ffcf6138940 RDI: 00000000017243a0
[ 1503.481181][    C1] RBP: 0000000001722250 R08: 0000000000000006 R09: 00007f74831433d0
[ 1503.489315][    C1] R10: 00007f7483130dc0 R11: 0000000000000246 R12: 00000000000063b0
[ 1503.497274][    C1] R13: 0000000000000705 R14: 000000000173ae80 R15: 0000000000000000
[ 1503.506951][    C1] Kernel Offset: disabled
[ 1503.511274][    C1] Rebooting in 86400 seconds..