666fe246eca70b9255f1146f3ffc23dc7da1d841edf14c956cf14563b32b303cb0e42f22541420", 0xc4}], 0xa) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) 23:26:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x15dc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:26:58 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x900, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000140)=ANY=[@ANYBLOB="090000effeffff7f3f000000000000007ad2000000000000080000000000000009000000000000000000008000000000f8ffffff5903000001000002000000000400000006000000000000000000000000040000000000000000000000000000010000000000000000000000000000000000000000000000f8ffffff000000000100008000"/152]) r1 = socket(0x18, 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x18) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000280)=0x60) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000000c0)=0x251) r3 = syz_open_dev$loop(&(0x7f0000000040)='\bMev/l\x86op#\x00', 0xfffffffffffffffc, 0x1100082) ioctl$LOOP_SET_STATUS64(r3, 0x127d, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101040, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) 23:26:58 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000600000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 756.255450][T11008] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 756.263837][T10999] dlm: dev_write no op 34bde833 a95e29700010 23:26:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:26:58 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000700000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:26:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x2000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:26:58 executing program 5: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_iA=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) [ 756.432093][T11299] dlm: dev_write no op 34bde833 a95e29700010 [ 756.444713][T11335] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:26:58 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000002000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:26:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffffffffffc, 0x1100003) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0xffffffff, 0x986ad8edfa7407fc, 0x1}) 23:26:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x3f00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 756.562876][T11527] dlm: dev_write no op 34bde833 a95e29700010 23:26:59 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x700, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:26:59 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000003f00000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:26:59 executing program 4: ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x680202) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:26:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x4000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:26:59 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x1, 0x8001, 0x81}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_ENTRY(r1, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) [ 756.865273][T11845] dlm: dev_write no op 34bde833 a95e29700010 23:26:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x11f0546) r1 = socket(0x9, 0x6, 0x99) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r2 = socket(0x18, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000000)={0x5b9, 'syz0\x00'}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:26:59 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000004800000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:26:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x4800}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:26:59 executing program 5: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="43bbd163fd81ba0e6e7822a38e0691e1cd5677478b8ebf1927556b86dc25b5c1109f599db5b9154d6fd21704a7b45c4d993f0d3be38e10bcbafa663eb770c2bd6bcecf89363e8f4d3df68e49512f1f621ce7caea739a7f44bcb2d90f46c6c5ced8ff87657a2470069ebf64446a6e862bfbdedfa9", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) [ 757.131404][T12375] dlm: dev_write no op 34bde833 a95e29700010 23:26:59 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000004c00000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 757.427509][T12701] dlm: dev_write no op 34bde833 a95e29700010 23:26:59 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x1200, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:26:59 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000006000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:26:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x4c00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:26:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:26:59 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000280)=0xbd) r4 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)=@polexpire={0x130, 0x1b, 0x10, 0x70bd28, 0x25dfdbfd, {{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e21, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x0, 0x2f, r3, r4}, {0x4, 0x2, 0xf750, 0x100, 0x1000, 0xd14, 0x5, 0x2}, {0x6, 0x1, 0x80000000, 0x1f}, 0x1, 0x6e6bc0, 0x3, 0x1, 0x3}, 0x3}, [@algo_comp={0x70, 0x3, {{'deflate\x00'}, 0x130, "20e9d22e4c679bc17fb999c27694abf01737488741199c25082764f73c9cdbf6136a26b1a52f"}}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x4) r5 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000280)=0xbd) r7 = getuid() sendmsg$nl_xfrm(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@polexpire={0x32f, 0x1b, 0x10, 0x70bd28, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, [], 0x21}, @in6=@mcast1, 0x4e21, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x0, 0x2f, r6, r7}, {0x4, 0x2, 0xf750, 0x100, 0x1000, 0xd14, 0x5, 0x2}, {0x6, 0x1, 0x80000000, 0x1f}, 0x1, 0x6e6bc0, 0x3, 0x1, 0x3}, 0x3}, [@algo_comp={0x64, 0x3, {{'deflate\x00'}, 0xe0, "20e9d22e4c679bc17fb999c27694abf01737489cdbf6136a26b1a52f"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_gt={'fowner>', r2}}, {@uid_lt={'uid<', r2}}, {@fowner_lt={'fowner<', r4}}, {@uid_eq={'uid', 0x3d, r7}}]}}) write$FUSE_ENTRY(r1, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) 23:26:59 executing program 4: ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000000c0)=""/97) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xf0, 0xc4200) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@assoc_value={0x0, 0x7f}, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000140)={0x4, 0x2, 0x3}) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000040)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x127d, 0x0) [ 757.616500][T12852] dlm: dev_write no op 34bde833 a95e29700010 23:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x5865}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dmv/\xd8Bop#\x00', 0x2, 0x1180082) r1 = getpid() getpriority(0xfffffffffffffffe, r1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x1810c, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ptrace$peekuser(0x3, r1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000006800000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 757.826144][T13052] dlm: dev_write no op 34bde833 a95e29700010 23:27:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000006c00000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 758.056534][T13380] dlm: dev_write no op 34bde833 a95e29700010 23:27:00 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x3f00, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000007400000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:00 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000000c0)) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r6, 0xf903, 0xff}, &(0x7f0000000180)=0x8) ioctl$NBD_DO_IT(r2, 0xab03) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3}) 23:27:00 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x81, 0x418040) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x444042, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x20}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x80000, 0x0) open_by_handle_at(r2, &(0x7f0000000300)={0x8, 0x61}, 0x416002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) open(&(0x7f0000000100)='./file0\x00', 0x408200, 0x168) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(0xffffffffffffffff, r7, 0x0, 0x80001d00c0d7) r8 = syz_open_dev$loop(0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000140)='t\bnu\x00\x00\x00\x00\t\a\x94\xbbg\xa6tU\x05', 0xb) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x127d, 0x0) 23:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6558}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 758.247628][T13487] dlm: dev_write no op 34bde833 a95e29700010 23:27:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000007a00000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6800}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000010000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 758.434648][T13867] dlm: dev_write no op 34bde833 a95e29700010 23:27:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in=@multicast2}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0x19) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="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", 0x10a}], 0x1, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], 0x14}, 0x10000) chown(&(0x7f0000000180)='./file0\x00', r2, r3) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) [ 758.581873][T13913] dlm: dev_write no op 34bde833 a95e29700010 23:27:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000020000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 758.774183][T14130] dlm: dev_write no op 34bde833 a95e29700010 23:27:01 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x4000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6c00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000030000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000000)=""/23) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) r4 = dup(r3) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000080)) [ 758.918437][T14229] validate_nla: 8 callbacks suppressed [ 758.918455][T14229] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 758.964251][T14239] dlm: dev_write no op 34bde833 a95e29700010 23:27:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000040000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x234e000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x7400}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)=""/207, &(0x7f0000000000)=0xcf) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) set_mempolicy(0x1, &(0x7f0000000180)=0x4, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1, 0x200000) [ 759.146619][T14546] dlm: dev_write no op 34bde833 a95e29700010 23:27:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000050000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x4800000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 759.254273][T14637] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 759.351652][T14661] dlm: dev_write no op 34bde833 a95e29700010 23:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x4c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:01 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0xff00, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000060000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x7a00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:02 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r1, 0x127d, 0x0) r2 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000080)=""/79) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200002, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000140)={0xfff, {{0xa, 0x4e24, 0xfffffffffffffb62, @mcast2, 0x800000000000005}}}, 0x84) [ 759.655605][T14975] dlm: dev_write no op 34bde833 a95e29700010 [ 759.661006][T14980] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x8100}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x6800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:02 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000070000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x55f, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) [ 759.867108][T15300] dlm: dev_write no op 34bde833 a95e29700010 [ 759.867559][T15298] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:02 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000200000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xdc15}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 760.109525][T15583] dlm: dev_write no op 34bde833 a95e29700010 23:27:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0xc4, @loopback, 0x1000}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x7f}, 0x8) [ 760.192269][T15694] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:02 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x1000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:02 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000003f0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x7400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 760.478375][T15930] dlm: dev_write no op 34bde833 a95e29700010 23:27:03 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)={0x1, "1a"}, 0x2) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000000)) 23:27:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000480000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 760.552013][T15965] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x7a00000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 760.707314][T16152] dlm: dev_write no op 34bde833 a95e29700010 23:27:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x34000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/\x82\xe9\x1f\x00', 0x0, 0x118b080) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000004c0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0xff00000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 760.875299][T16352] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 760.921728][T16355] dlm: dev_write no op 34bde833 a95e29700010 23:27:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x400300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 761.149455][T16564] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:03 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000600000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf0ffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x2, 0x1100082) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000280)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xdce7, 0x2000) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 23:27:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0xff}, 0x1c) 23:27:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000680000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0}, 0xff}, 0x1c) [ 761.318862][T16678] dlm: dev_write no op 34bde833 a95e29700010 [ 761.358010][T16739] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000006c0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 761.450432][T16891] dlm: dev_write no op 34bde833 a95e29700010 23:27:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40540, 0x0) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000080)="147fcb3ba766c1860cd3710cb2d3a2fff3458ffa6fc4ae90fd135a5683c9989ec2ffc51ac4ef17ca3e483699c688e033708f79c83b3a20a8b7c2b969bc65b77ef04a895c7652d7a8335d23aac693c0d29dd6bfa63236eda98e9d9a1f001dfc3b8bc1ea1f6810ab5f0b0c15ac6313a938de334885410e1e2375af97caa81e08a19d43d86804a07861d5f109df168e15f43decce10d642c1d9205c3b9026e8fdf829e0fe404d57f3c29d44a517509986adcc3b45859b6aaf7cd7807a9ca472f38a129f72c63442738a8c0ad8f9f43a45b518098d63d92c3e8c021edeaa7c0c67d34186bf7283f1ac531298ec90def319a1fbecda961bebfcef32a0f178") r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r1, 0x127d, 0x0) 23:27:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x1000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 761.556517][T17084] dlm: dev_write no op 34bde833 a95e29700010 23:27:04 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000740000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0}, 0xff}, 0x1c) [ 761.698455][T17151] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 761.739382][T17159] dlm: dev_write no op 34bde833 a95e29700010 23:27:04 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x3000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = socket(0x18, 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r3}) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="8cb00e65057a61133a", 0x9}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="586138a836a608de6ad0e15fabb3c781e0ce33d1ac21063f85dc73", 0x1b}, {&(0x7f0000000140)}, {&(0x7f0000000180)="fc432e7447a4924f9b586eca7d7e55790cea6450008406d40988129aa0a2ffd6", 0x20}, {&(0x7f00000001c0)="808e1521cb6ee8ad4db30d830dcb43b5fc49ade2f4dc222eeca2dab13ee8507a542ab68a0fb71b86300f6a4695cbf8cf78da6187d8684f4b9d8ea4a4bb4ec4eb16313d42ba5311f626ca1a61afc3358c34c4df8bb19cb104b06c73b324c9426134cbab96c25e232a290bb205358549a7b62d8d951cd23a833c900e43fd1516003184fa6cf90c35dda4adb6777325af63c277ce0855ae3766a36ab91f9e7b5549d9d264034f7fe12226b068ee6f70f9f5cee97b4fdaba553c0fa4379d97da81ed0accbe79ea44f2e72a6b9c661dc97c4f35d093bfc0811680a70adfaaf719cdb5b9edc5666a9fb2cad1ca", 0xea}], 0x6, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:04 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000007a0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x2000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0}, 0xff}, 0x1c) [ 762.025284][T17501] dlm: dev_write no op 34bde833 a95e29700010 23:27:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0}, 0xff}, 0x1c) 23:27:04 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000200000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x3000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x11400c2) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) mq_unlink(&(0x7f0000000000)='/dev/loop#\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x0, 0x8001}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x2}], 0x22, 0x0, &(0x7f0000000100)="a56bb574bd4d07129d96e17369b3576687cac0468ee15c63b3b97f719d531ee09ebb"}) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) [ 762.189565][T17832] dlm: dev_write no op 34bde833 a95e29700010 23:27:04 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000300000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0}, 0xff}, 0x1c) 23:27:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x4000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 762.387114][T18114] dlm: dev_write no op 34bde833 a95e29700010 23:27:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000400000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:05 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000140)=0x7ffd) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r2, 0x127d, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) 23:27:05 executing program 5: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x200000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000000c0)=0x7, 0x8) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x48000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r3}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="815494bb6b3cc82730ecec7c02ba7b4be94291940dcc1963ae64e9", @ANYRESHEX=r4, @ANYBLOB="2c000000000000009d3dfcff1b00303830303030303030303030303034303030302c725f69643d000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1f00"]) write$FUSE_ENTRY(r4, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) 23:27:05 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x4000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0}, 0xff}, 0x1c) 23:27:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x5000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 762.667935][T18388] dlm: dev_write no op 34bde833 a95e29700010 23:27:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000500000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:05 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x800602) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000180)=0x400) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000280)=0x387b) r4 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2f0300001bd63a2f006fadc4571fb0fd00100028bd7020fddbdf25fe800000000000000000000000000021ff01000000000000f1ff0000014e2100004e1b157c50a722", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0400000000000000020000000000000050f700000000000000010000000000000010000000000000140d000000000000050000000000000002000000000000000600000000000000010000000000000000000080000000001f0000000000000001000000c06b6e0003010300000000000300000000000000640003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000020e9d22e4c679bc17fb999c27694abf01737489cdbf6136a26b1a52f"], 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_ENTRY(r5, &(0x7f0000000480)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x90) 23:27:05 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000002c0)=""/148, 0x94}], 0x4) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) write$eventfd(r0, &(0x7f0000000080)=0x418, 0x8) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r2, 0x127d, 0x0) 23:27:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0}, 0xff}, 0x1c) 23:27:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 762.855729][T18820] dlm: dev_write no op 34bde833 a95e29700010 23:27:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000600000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 763.038396][T18831] dlm: dev_write no op 34bde833 a95e29700010 23:27:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7fff, 0x1100082) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x8) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x8) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x1448f) 23:27:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000700000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x0}, 0xff}, 0x1c) [ 763.202912][T19241] dlm: dev_write no op 34bde833 a95e29700010 23:27:05 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x5000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x7000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:05 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000004800)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="330dddf1a96418b267f125f199a2ab11c4a8650afded4484cfe0147bf5a66352f21ecc435b86840bf84f32", 0x2b}, {&(0x7f0000000040)="2bfd750d47c14791863bbc181aa2e5ebd8df6cb2477801cbc20af22247c540b734f4cb57a9b93f7c4de7b43a149a6869561796f49efc615887f1ef557804834c229d265c5bc008665044938c1618ce4a3be45fbd8f6533114b591e451e0153614d75228f42dbcbe897be2acc2e594a75ad8ecc28fa8d6bcaa099d799149c68994fd6d78a08b42d510e", 0x89}, {&(0x7f0000000140)="768852bb3f705848af9768d6ca19c252cc4f8641ff2348da75cc06f24820bf233c2a5d862441cfc2a6ee70dad0e12e8752d652f0e6c63a9685c3588fe790e1f79b998351f1aa7a", 0x47}, {&(0x7f0000000240)="54d3f5efb1d213896b27d7b4f7eccbcdcca30cb9add22af46b370bc8b223aa7e1dc4c9b8a4b629dd82fe94909e9643191946b8cf810c1f7e223822332819eafca89425a61625e7411b847d2a1906a38d7b1de03f5a9a45a854b85d0407e2fd2511cc917f7149104ec969d803dbed134ef9a12e16531077eaf142b708dac671bbc074b52773b017e9a958bc83e393ff5d03a2b776809d68", 0x97}, {&(0x7f0000000340)="84f495955fd57aecf4f61a949af69cba24578ba017b7d5a8c0f3671fcfe7f51f919be9289898e43f3ed6c5b9d1640da3bac5ab217eb5ef233d12852b1f89fccd9aaf7c3253d7bb0d4153470953b4b659cc8cf02e7811bb824ad96282425d4c5e9050b830365eee60989cc1ab392d8112add8580d1ad95e78716d1568846272b250aeeb99eba3b51f7dd837b7a10f5819e6833f9f08b113d93fdbb134a2d7c8fdb06a3f59e13a80c24581cbca6a24bce60f9f9136dbc29cede611bd64e876ce6aafb137f6f84cf193cf4830808bde4b00ca21ad", 0xd3}], 0x5, &(0x7f0000000680)=[@iv={0x60, 0x117, 0x2, 0x50, "605f86c505f42cbbca21a8316fd57eac26668609b4741c3f2d152288b94d46af723f8e53fcd4813729352b0c0028c5ada999c762a938d1c8504c3f4e9e51c7d3a8302e2e0360f2d2bb4c2a9d78105c99"}, @iv={0xf0, 0x117, 0x2, 0xdf, "23533317bcb7f844e8a1fe3483d163dcd2a0ae488819833b87b2c63b7d5c57a32c73eb4942bd3fbe0e1fc052cb6c1f76639e2a64e799b5ebbbe3dc5b1c2172771eabf69c3567dac0e564affd13bee437348be8c183052107a483af299233c0e2b70aa371d599886165f296fd3f3cfc73e2ff957d5ab545e68d788ce3bb6e63040bf4c8afc4ea01c41c3ac9685226796664ed76ae918976f2cd309592dd97e4d1ee549ea61fa69e03c4c4effe4d7d1a5b74f61657c87c4558eb09bfdc0ff4168963470389bd5a6165c14ab58d4d2e3285052bed964f6847001e314d73edc697"}], 0x150, 0x8102}, {0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="2b9b3864e9e13465f31783dba81c188df52d194b52315759b0d4c9023e8c38db682bb3891e9e9af958565787a055854040313e9ea334b1791244765fe09024ddf42fda25e7a586f6116cfa5f21413394d0885da86c877a0d7cf075792c150e358d05caed4779cbc8f9507cdee6c7e0949d5cf48e83defc34e5ae", 0x7a}, {&(0x7f0000001880)="059e242a44b9923ad0d6f49e7b185887e624b2614f55dc374593cff10f9b9ff5250e9929669a308d77db42f8ed5a00675e3eb49ff236206483a660529284f44819abd45b07cd09f6c2d18bdd4d3dc0ef1680d795f45e1b34a9c304c8a1f3232e76cd2c3a99208ced2ae3f440ad735cabc34f3b832487d27f52da1e3183b2f39824ddf2850d13cd526dcbc43c83312fc69eccdce62253db79590de1c90c1ded096aa98d5340", 0xa5}, {&(0x7f0000001940)="7f2a0739aa189f2dc32b9a873637c342eed288f26aca4e3ceafacf68e16a30c7d46b4adbd75c17ee54235927411040017eb2b0efc43f4428b8d139482d1a692ae477d04c50fa3416e12625137672b791b970e45def73220c609c7ee604ae32ce3d22", 0x62}, {&(0x7f00000019c0)="baaa02ed3f85587effc4337bf827417816b3e1035dd82c994afe88b105cf12dd5a6b08e5698783dc06daa51ce6ce2295e6e8ab360ebbc538c438c25a8a58bcef0a6ed99e55f83bb7aebee1af39d8f1a1", 0x50}, {&(0x7f0000001a40)="c1e268524b39a3e0504ed103dff9d9ad0fde795cb66352ec2735b92796a274ceaecd174252db873639a7f8a94d2bd1164ad07dcbe76a700cd2b920bdd22de5ef75da851866a53e8c99d3eb37737a63933c348a2fb5e9dc485a9d92846dc8e6a78cb9567151fba3b09ce7201c87c637a3d77ea711c4c103d398e6dc97d6f2997c", 0x80}, {&(0x7f0000001ac0)="f45fa6f92136e4a5c7739fe8604145c76762796d9b823e27a5155338c04ebd8e50c6ff90552cb3c93ab576147892a1ddaf24a351667fb734abfdb09b3a27cb33b433a4e669b97209943cd838f41498", 0x4f}, {&(0x7f0000001b40)="41b68602be82c088568681161bf68c4eca4e5471e4e01f9f74ccb08ccaab18b9c74717bf8e6f07ea36af7377c3803cf549e98fb7a3d75409fa7489a57343b7a82870e9732040e09f7eeefebca908e0f7e6f1c9c8692da7829709d30c636c0a7973400adc99fa8b2e4174eac21f2b8599f16133de5e966dfa921cfc704c70797781dae7509e9b8d2a96a8", 0x8a}, {&(0x7f0000001c00)="6e235042d7062b4fde40f8ca74aaf7c83d7af8247bf68bba18a3cf7a5f5b81ca03b5259113719e5c225fc906b8374970b671483b1f532e18adb1e560a95309ce9807e543dbedc68977d1bdb580fcece844c5878a427f27b4a5330503b3fe726209be1a556a26d2ca", 0x68}, {&(0x7f0000001c80)="149ef05e80f275", 0x7}], 0xa, 0x0, 0x0, 0x4000080}, {0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001d40)="e15b7cf46c9bfed30ad3babc6d68a73b2e6dff055c07c45542cf92c2802d4d0ab1b0c6eb9585392615c0c194399db2fc1bfe3bb97c6587dfe5506abcdb77e67ea0dc01a6b021ee43331d3b0b86d4", 0x4e}, {&(0x7f0000001dc0)="e5e6d28c0db0978cc38d6b4340e1c828a5ceb1369a953556e9959d1a1240ba5ae33458d2116cb64f385b9d12", 0x2c}, {&(0x7f0000001e00)="9ebbb31a622a3621a27a860444b7b8dbc52486a22ffe3ce57674e36c9822770f0a90567f5ab49d846465cea091aa2cff96eb20959de62abe1af48caff62d12ce891d1786c8b8261a4f202b48f4e58793fe4ef1c18b368a590ee59aa45d0db6425a96c02b3ade6748d02dfa3ca78b7d1a74ce801d28030caf6269fea19033c0ad75521bbe94dc49c131d56dbbe042368db543d4ea8feed925782026f37cbb25368cf56c905a88bb8e90f746a63a13ce2abad6531852153c6ed212705dcf6068e6b14ea3222236d790732129a3b1f01014df2a1eb72db2e071", 0xd8}, {&(0x7f0000001f00)="c28c9def5ed07aaf3526fdf290b72b38591bcf0b8ce0e26d16c8f528053c4020451191d6c0f74f2d1de78ab5440a5833cf26b851228f46e32304d54b760241f975020060c1bbbd0b786bf8686a8df90bed3fa486e4198304968a374e970f93a6428b53c957842fdc82c87b44c12c1487a9ab667a", 0x74}, {&(0x7f0000001f80)}], 0x5, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002000)="23554ef5b74e90c8c8b785699907af0e4e54d5f3bd52ba3c21c6997feba0a85a98285580d0995f948fc75f2e0e2b6fb6d8daa3761fbe8e3a11c3f4f7721636170eea11ce959b86afd7567851f735d6a7f068a469fc147faf10823c60c195fbfaa5ad75d8e9d42cbe3e25dfcf7ada260f4d2de15b5b76c249873e9f395e47a22a93773ff16f5c1f8a532b85eb44be77e12a34d91dcbd0800c3deb5334604aeeb98668dabd3da7ce039b021c3ec5fed559e3c48ef1bf3309a9826e699b9475150e470d36f2ff91ed9345f3187e943d4d80496a448d", 0xd4}, {&(0x7f0000002100)="98851c8ff42d1a644e2d206daf89e8353a301f6ca480a530c055cb0e243bb887ae93343293fa87b29a868a3f193efb1b011ca53af93c2e7efb8bdc31141a3ef1c0c7049dfcdd7d734831c663e08413d215f1bf4afee5ba403904c427ec6cf02efd7aba8679239bdb66e4eba82d93364556f337de44189e5e2afd967e101d865c12e562af873692d933b5a6abfe00bd40", 0x90}, {&(0x7f00000021c0)="ca0d8dbcd2a38622c8e9a669f254c14ad44139797bb7420ddb57ae77345626d1ffd00ecc02836cca04f5344346af782c51fd0b6bb2f49d4f6b65133860db94f879e32ca7f028cc5592949490bf2018d870ef50355ba4ba4baa3f4062552be059ffddbcbd18c7ff5721161d1d491b4526641c3908ffd91d", 0x77}, {&(0x7f0000002240)="0856d8b69578ad472066747f1d39ad4e91f7fefe30", 0x15}, {&(0x7f0000002280)="e5a0eb41522b8b067468d66e3949783dec2d57d852d8adce60211f20d6671c3c3a35a480fcec9decd126b65db82f6f2af5e86ab2edb8ab7d6488aa5c4c3f565a918bfdcc8dce1cac1b4973f778bf7bb38eab4487cc5e6df12e3328b36f4af986becf7282804b8c355eae4f24ca6bcb498ee6a128888b996851bbf9628027f7b6ad35166acbdca2988306fe811c2079e26da9305491e584fa153db2461a1bc872e745e3116d7e989990", 0xa9}, {&(0x7f0000002340)="05f17d4933e213a25d41b9677a92e7715dd1593b7927a295d6412e7c69", 0x1d}], 0x6, &(0x7f00000023c0)=[@iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @op={0x10}, @assoc={0x10}, @assoc={0x10, 0x117, 0x4, 0x10000}, @iv={0xbc, 0x117, 0x2, 0xaa, "9a8c79e331a21139459d39f052d46486baef7abded02ee08b94d4712f191487b437522439db062e6e37c483f4d7489a25a8db70be6aa7cdb76f3b918474dac4e0b43ce69cfb260d826d6e5794d133cda4e227e824f0fd4a7f38c3a29c0317ed1eb3c7f7f041f7e3f50dcb041f53f74e3c7eed088138958d09dbbd5d12569b44195bdfc6800be4af2d942117b002ea648ff38de1dedfda86a92cd100e95b0a10d0386a319fcdce4f96467"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x2}], 0x111c, 0x2009}, {0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000004500)="827ae11f25c75f85e5122319f4b991821307a685123928e4436ea4bea072fd26293d1e8c5330d03db54a1d10a82cf2ba62a74b52322c4b62e775c5be7ea9507f4c87eb71a34b99f99ab262b208a231aeedfc1760ad8897466b276cc94e0290e3e3e5ad98231f35067919f36855dd8ed5385bef095395a4090c5693aecfe1eee8c1295454f0ac3c83e46b8f6db698e80f4a13ae715fa85a95e4a75e649c5aa5d7edf34d25e65288333255794835f86b5c6662f43b3ccf41e3c9233189def532f7b255f1e74d14b503fc7a7a8190c19f101434c4fbbb4bc6a65950ed80", 0xdc}, {&(0x7f0000004600)="d7b6f7e7fb5ec67fe5f8b9a170f7913af1ace83202eeddd33833f4fc98a725f64520bd1fc62b2036e4572de5", 0x2c}, {&(0x7f0000004640)="cdb12cf44b6771049a1ae6dd2e8db0ce71ed0f3f6d18969c6b4dde49337fd7dfb72da62c4cb2ced108791bc0dcf39d54899813dec839971fa3c67b598b7a2c63c05931194bd2f375b8335a4b4b40522a9153ec777b8a9e5e0be0ed27c087dbbed68bf9483b8b56411b4fd2d0911d904c5675f7e289dd05c695d6eb69a4b9a7ee7ae0968f4a162c", 0x87}, {&(0x7f0000004700)="c5cf33ec7ae07b904e4217af898c89b6e77577a9d9d0e72a9312374bfc3ccbfef3710b76a5cd960e201fb0e33ea80951ab598f1d19fffea2c2f013e23dc550a0304d3767483f659e0a33e2f2acb47746303f1077c10a5b", 0x57}], 0x5, &(0x7f00000047c0)=[@assoc={0x10, 0x117, 0x4, 0x9}, @assoc={0x10, 0x117, 0x4, 0x5}, @assoc={0x10, 0x117, 0x4, 0x4}, @assoc={0x10}], 0x40, 0x44808}], 0x5, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030267e23629c7f2230352c757365725f69643d00000000000000000000000000000000afa9fcd3efbd473df553cd4835d258b7f74b12500e902f11edc713948aee8451fe863bc9360658ba67476c68cdbdad4659b058ea7961ef064e0b274a30788bfb4668af5fb56acc126f098153bb0a750c9f69f2f6a0d92b0809b530ca4191e88f5ce7ad924478c7249d7825b7b14ee84628d636a2fed7e852dacb7e09cfe464aeae7777ece40794bc7b12f890ecadeb7bb2d6afba4bf767a8fec9fb485e05", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_ENTRY(r1, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) 23:27:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000004800000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="bca54a2523235722eb890aa9bc45b785"}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ed6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x0}, 0xff}, 0x1c) [ 763.454362][T19515] dlm: dev_write no op 34bde833 a95e29700010 23:27:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x8000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000004c00000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:06 executing program 5: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000340)=""/239) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000280)=0xbd) r4 = getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@polexpire={0x124, 0x1b, 0x10, 0x70bd28, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, [], 0x21}, @in6=@mcast1, 0x4e21, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x0, 0x2f, r3, r4}, {0x4, 0x2, 0xf750, 0x100, 0x1000, 0xd14, 0x5, 0x2}, {0x6, 0x1, 0x80000000, 0x1f}, 0x1, 0x6e6bc0, 0x3, 0x1, 0x3}, 0x3}, [@algo_comp={0x64, 0x3, {{'deflate\x00'}, 0xe0, "20e9d22e4c679bc17fb999c27694abf01737489cdbf6136a26b1a52f"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='f\x03\b\x00', 0x0, &(0x7f00000007c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'\xff\xff\xff\x00'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@hash='hash'}, {@appraise='appraise'}, {@uid_eq={'uid', 0x3d, r4}}, {@context={'context', 0x3d, 'staff_u'}}, {@dont_measure='dont_measure'}]}}) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) [ 763.663692][T19871] dlm: dev_write no op 34bde833 a95e29700010 23:27:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x0}, 0xff}, 0x1c) 23:27:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000006000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x9000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 763.879993][T20043] dlm: dev_write no op 34bde833 a95e29700010 23:27:06 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x6000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000006800000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:06 executing program 5: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="b8726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000000)={0x10}) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) 23:27:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x0}, 0xff}, 0x1c) 23:27:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xa000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:06 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r3, 0x127d, 0x0) [ 764.205895][T20295] dlm: dev_write no op 34bde833 a95e29700010 [ 764.236424][T20300] validate_nla: 8 callbacks suppressed [ 764.236433][T20300] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000006c00000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xb000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 764.420535][T20680] dlm: dev_write no op 34bde833 a95e29700010 23:27:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x0}, 0xff}, 0x1c) 23:27:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000007400000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:07 executing program 5: 23:27:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x202000) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r4, @in6={{0xa, 0x0, 0x0, @remote, 0x5}}}, &(0x7f0000000080)=0x88) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={r4, 0x0, 0x1e}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'tunl0\x00', 0x200}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'ipddp0\x00', 0x8d00}) [ 764.535833][T20718] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 764.607701][T20824] sctp: [Deprecated]: syz-executor.4 (pid 20824) Use of int in maxseg socket option. [ 764.607701][T20824] Use struct sctp_assoc_value instead [ 764.722210][T20927] dlm: dev_write no op 34bde833 a95e29700010 23:27:07 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x0}, 0xff}, 0x1c) 23:27:07 executing program 5: memfd_create(0x0, 0x0) r0 = gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xe900, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)="a4", 0x1, 0xfffffffffffffffc) fchmod(0xffffffffffffffff, 0x0) ptrace(0xdca7b589c8d37ba8, r0) keyctl$get_keyring_id(0x0, 0x0, 0xfffffffffffffffa) wait4(0x0, 0x0, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='logon\x00') 23:27:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xc000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000007a00000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='\xbe\xdb\xe3\xedy\x13\xe6F\xde\x93\xb8', 0x0, 0x1100082) r1 = getpid() getpriority(0xfffffffffffffffe, r1) capget(&(0x7f00000000c0)={0x0, r1}, &(0x7f0000000100)={0x9, 0x7fffffff, 0x259a, 0x3b, 0xf6, 0x5}) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000080)=0x1) [ 764.927952][T21048] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 764.937082][T21047] dlm: dev_write no op 34bde833 a95e29700010 23:27:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x200000003, 0x11aa002) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = socket(0x5, 0x3, 0x9) getpeername$packet(r1, 0x0, &(0x7f0000000180)) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{0x2000, 0x84003, 0x3, 0x4b, 0x0, 0x9, 0x0, 0x3, 0x10000, 0x0, 0x7ff, 0x7fff}, {0x5000, 0x0, 0xc, 0x4, 0x9, 0x2, 0x40, 0x3, 0x7ff, 0x100000000, 0x8, 0x100000001}, {0x3000, 0x0, 0x0, 0x6f14b772, 0x8, 0x3, 0x9e4c, 0x0, 0xfffffffffffffffc, 0x1, 0x8, 0x1}, {0x6000, 0x3000, 0x0, 0x690, 0x4, 0x9, 0x484e, 0x9, 0x622, 0x9a, 0x3, 0x10000}, {0xd000, 0x100000, 0x8, 0x9, 0x7f, 0x100000000, 0x7, 0xfffffffffffff55c, 0x1, 0x0, 0x3, 0x8001}, {0x100000, 0x100000, 0x3, 0x9, 0x5, 0x3, 0x5, 0x80000001, 0x1, 0x7fffffff, 0x4, 0x8000}, {0x0, 0xf000, 0xd, 0x604080ef, 0x7f, 0x0, 0x4, 0x3ff, 0x2, 0x4, 0x25, 0x6}, {0x22fdb706d49f6a2b, 0x2000, 0x6, 0xffff, 0xff, 0x81, 0x101, 0x2, 0x3, 0x100, 0x100000001, 0x7f}, {0x4, 0x9d8af6621d99cb48}, {0x5000, 0x5000}, 0x40010025, 0x0, 0x32ea3cc6a2b0f65b, 0x4, 0xd, 0x5400, 0x2, [0x0, 0xff, 0x7fff, 0x10000]}) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4, 0x1000) perf_event_open(&(0x7f00000000c0)={0x4, 0x1ff, 0xffffffff, 0x2, 0x4, 0x25, 0x0, 0xff, 0xb6308, 0xc, 0x2, 0x45c3, 0x8, 0x100000000, 0x5, 0xffffffffffffea8e, 0xfffffffffffffff9, 0xe00000000, 0x2, 0x3, 0x2, 0x5, 0xffffffffffff8000, 0xff, 0x4, 0xc0, 0x9a48, 0x100020001, 0x6, 0x3, 0x7fff, 0x1b, 0x0, 0x4, 0x1ff, 0x0, 0x4, 0x6, 0x0, 0x200, 0x2, @perf_config_ext={0x400000000000009, 0x3}, 0x16450d25998e48b, 0x100000004, 0x0, 0x6, 0x40, 0x401, 0x8}, r2, 0xe, 0xffffffffffffffff, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000001c0)={0x1, 0x80, 0xfffffffffffffbda, @broadcast, 'caif0\x00'}) 23:27:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x0}, 0xff}, 0x1c) 23:27:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000003000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xe000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:07 executing program 5: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0), 0x0) fstat(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) getresuid(&(0x7f0000000140), 0x0, 0x0) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001280), 0xc) getgid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)) getgid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) getresuid(0x0, &(0x7f00000001c0), 0x0) getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) getegid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00', 0x19, 0x4, 0x0, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0}, 0x50) 23:27:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000005000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 765.172163][T21473] dlm: dev_write no op 34bde833 a95e29700010 [ 765.182127][T21478] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 765.333574][T21826] dlm: dev_write no op 34bde833 a95e29700010 23:27:07 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x8000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0x0}, 0xff}, 0x1c) 23:27:07 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') r2 = syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') sendfile(r1, r2, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb330, 0x0, 0x0, 0x0, 0x9af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8110}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)) r3 = getpgrp(0xffffffffffffffff) sched_setscheduler(r3, 0x3, &(0x7f0000000500)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x647f, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="08f5a9db1287df8ab278c4e73da592c02e16e091a35048e7218a9553558b38120af2") r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x0) getpeername$packet(r5, 0x0, &(0x7f00000002c0)) r6 = fcntl$getown(r5, 0x9) sched_setscheduler(r6, 0x6, &(0x7f0000000280)=0x3ff) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480), 0x106, 0x3}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xfa, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x8, 0x6, 0x4}, &(0x7f00000003c0)=0x3b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x1}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)=r7, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) fstatfs(r4, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x100) ioctl$LOOP_SET_STATUS64(r8, 0x127d, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x100) ioctl$KDGETMODE(r9, 0x4b3b, &(0x7f0000000080)) 23:27:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000006000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:07 executing program 5: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0), 0x0) fstat(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) getresuid(&(0x7f0000000140), 0x0, 0x0) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001280), 0xc) getgid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)) getgid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) getresuid(0x0, &(0x7f00000001c0), 0x0) getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) getegid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00', 0x19, 0x4, 0x0, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0}, 0x50) [ 765.506295][T21882] dlm: dev_write no op 34bde833 a95e29700010 [ 765.514274][T21878] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0xc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000066, 0x0) 23:27:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000007000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0x0}, 0xff}, 0x1c) 23:27:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x10000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 765.686290][T22093] dlm: dev_write no op 34bde833 a95e29700010 23:27:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000020000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 765.765333][T22108] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0x0}, 0xff}, 0x1c) [ 765.863519][T22348] dlm: dev_write no op 34bde833 a95e29700010 23:27:08 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x12000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='\a\x00\x00\x00@\x00\x04\x00p#\x00', 0x5, 0x1184082) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xa9eb3af8245e77ad, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x5) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r2 = socket(0x18, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000140)={@local, @dev, 0x0}, &(0x7f0000000180)=0xc) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @dev={[], 0x21}}, 0x10) 23:27:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x11000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000003f000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0xc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000066, 0x0) [ 766.085275][T22592] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 766.106073][T22602] dlm: dev_write no op 34bde833 a95e29700010 23:27:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000048000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:08 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bpq0\x00', 0x300}) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x4) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x127d, 0x0) 23:27:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x12000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 766.296307][T22848] dlm: dev_write no op 34bde833 a95e29700010 23:27:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000004c000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001840)={{0x80}, 'port0\xa5\xfe\x98W\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe5\x00\x05\x00', 0xffffffffffdfffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa09b10562508f6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) [ 766.363885][T22926] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x234e], 0x0, 0x0}, 0xff}, 0x1c) [ 766.461234][T23011] dlm: dev_write no op 34bde833 a95e29700010 23:27:09 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x3f000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x100, 0x0) signalfd(r2, &(0x7f0000000240)={0x7}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xffffffffffffff5e) r4 = socket(0x4, 0x4, 0x0) getpeername$packet(r4, 0x0, &(0x7f00000002c0)) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, r3, 0x1b, r1}, 0xff1d) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x63) 23:27:09 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000060000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x13000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4800], 0x0, 0x0}, 0xff}, 0x1c) 23:27:09 executing program 5: 23:27:09 executing program 5: [ 766.760523][T23380] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 766.770673][T23383] dlm: dev_write no op 34bde833 a95e29700010 23:27:09 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000068000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4c00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r1) recvmsg(r2, &(0x7f00000097c0)={&(0x7f00000093c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000096c0)=[{&(0x7f0000009440)=""/128, 0x80}], 0x1, &(0x7f0000009740)=""/84, 0x54}, 0x0) 23:27:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x14000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 766.986522][T23701] dlm: dev_write no op 34bde833 a95e29700010 [ 767.107826][T23804] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:09 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x40000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:09 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000006c000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4e23], 0x0, 0x0}, 0xff}, 0x1c) 23:27:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000003c0)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c09, 0x0) 23:27:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000000)) 23:27:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x20000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 767.274510][T24133] dlm: dev_write no op 34bde833 a95e29700010 23:27:09 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000074000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x6800], 0x0, 0x0}, 0xff}, 0x1c) 23:27:09 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000007a000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:09 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x18000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 767.455580][T24422] dlm: dev_write no op 34bde833 a95e29700010 23:27:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x3f000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x402080, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+10000000}, {r4, r5+30000000}}, &(0x7f0000000140)) r6 = socket(0x18, 0x0, 0x0) getpeername$packet(r6, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 767.587642][T24552] dlm: dev_write no op 34bde833 a95e29700010 23:27:10 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0xff000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000100ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x6c00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x40000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000c80), 0x4924924924921ae, 0x0) 23:27:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='\x00\x1b|\xf3}\xebJ\x00\xdd\x00\x04', 0xc3e, 0x428ae0) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x20000000007, 0x800) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fdatasync(r2) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000100)={0x8, 0x6, [{0x5, 0x0, 0x9}, {0x0, 0x0, 0x4}, {0x400, 0x0, 0x8}, {0x15a3, 0x0, 0x4}, {0x7, 0x0, 0x7}, {0x0, 0x0, 0x7}, {0x3, 0x0, 0xffff}, {0x1b9, 0x0, 0x7}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) [ 767.997742][T24978] dlm: dev_write no op 34bde833 a95e29700010 23:27:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000200ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x48000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000c80), 0x4924924924921ae, 0x0) 23:27:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x7400], 0x0, 0x0}, 0xff}, 0x1c) [ 768.184407][T25289] dlm: dev_write no op 34bde833 a95e29700010 23:27:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000300ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 768.362552][T25587] dlm: dev_write no op 34bde833 a95e29700010 23:27:10 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x7ffffffffffff, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x7a00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x9e) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x4c000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000400ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:10 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) [ 768.585719][T25618] dlm: dev_write no op 34bde833 a95e29700010 23:27:11 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000500ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xff00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x60000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 768.732575][T26017] dlm: dev_write no op 34bde833 a95e29700010 23:27:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0xa, 0x0, 0x0, 0x0) 23:27:11 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000600ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 769.014921][T26297] dlm: dev_write no op 34bde833 a95e29700010 23:27:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x65580000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x6d, 0x2, 0x0, 0x0}, 0xf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) 23:27:11 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x100000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:11 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000700ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x6d, 0x2, 0x0, 0x0}, 0xf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) [ 769.205441][T26403] dlm: dev_write no op 34bde833 a95e29700010 23:27:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x68000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:11 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000002000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) [ 769.392774][T26668] validate_nla: 7 callbacks suppressed [ 769.392783][T26668] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 769.438479][T26674] dlm: dev_write no op 34bde833 a95e29700010 23:27:11 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000003f00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6c000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x511082) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x234, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800000000000000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x62}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9f0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x650e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x90040}, 0x8010) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, &(0x7f00000003c0)) [ 769.670698][T27086] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 769.730589][T27093] dlm: dev_write no op 34bde833 a95e29700010 23:27:12 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x200000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffff9fffff3ffa7, &(0x7f0000000140)) 23:27:12 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000004800ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x74000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xffffffffffffffff, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) [ 769.947920][T27404] dlm: dev_write no op 34bde833 a95e29700010 23:27:12 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000004c00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 770.000404][T27416] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:12 executing program 5: seccomp(0x1, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) [ 770.090203][T27784] dlm: dev_write no op 34bde833 a95e29700010 23:27:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='\x00\x00\x00\x00\x00\xcbq\xfbo#\x00', 0x0, 0x112a082) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) accept4$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x80000) 23:27:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x7a000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:12 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000006000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 770.263968][T27912] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 770.289905][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 770.289919][ T26] audit: type=1326 audit(1568071632.712:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27831 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 770.364689][T28030] dlm: dev_write no op 34bde833 a95e29700010 [ 770.388147][ T26] audit: type=1326 audit(1568071632.712:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27831 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 770.468386][ T26] audit: type=1326 audit(1568071632.712:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27831 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 770.518612][ T26] audit: type=1326 audit(1568071632.722:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27831 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:13 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x300000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x80060000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/\x02\x00op#\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002be000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r2], 0x2}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x1f, 0x3f, 0x0, 0x0, 0xfffffffffffffffa, 0x5}}, 0x50) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x0) r3 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000200)) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000006800ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 770.572848][ T26] audit: type=1326 audit(1568071632.722:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27831 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000006c00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 770.632700][T28142] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 770.636514][T28146] binder: 28144:28146 ioctl c018620c 200001c0 returned -22 [ 770.658846][T28150] dlm: dev_write no op 34bde833 a95e29700010 23:27:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924921ae, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 770.816022][T28469] dlm: dev_write no op 34bde833 a95e29700010 23:27:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x81000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000007400ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0x0}, 0xff}, 0x1c) [ 771.038385][T28730] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 771.068009][T28771] dlm: dev_write no op 34bde833 a95e29700010 23:27:13 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x400000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924921ae, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 23:27:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000007a00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x7f, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x200) 23:27:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x88a8ffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 771.330483][T28986] dlm: dev_write no op 34bde833 a95e29700010 [ 771.346077][T28982] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 771.377231][T28986] dlm: dev_write no op 34bde833 a95e29700010 23:27:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000002000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='\x01\xef\xb7 \x00', 0x7, 0x3240) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x234e0000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:13 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0045878, 0x0) 23:27:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x9effffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 771.602029][T29305] dlm: dev_write no op 34bde833 a95e29700010 23:27:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) [ 771.646429][T29371] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:14 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x500000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000007000)=""/154) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:27:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000003000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x48000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x10000) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f0000000080)={0x0, @data}) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xdc150000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000004000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 771.969236][T29630] dlm: dev_write no op 34bde833 a95e29700010 [ 771.981733][T29631] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:14 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) getsockname$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x820) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x7f}}, 0x0, 0x80000000}, 0x88) ioctl$LOOP_SET_STATUS64(r1, 0x127d, 0x0) r2 = socket(0x18, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x7, 0x4) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xc2b) 23:27:14 executing program 5: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x6d, 0x2, 0x0, 0x0}, 0xf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) r1 = dup(r0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000300)=""/242}, 0x18) 23:27:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4c000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000005000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 772.121807][T30011] dlm: dev_write no op 34bde833 a95e29700010 23:27:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf0ffffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 772.289016][T30190] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 772.317334][T30319] dlm: dev_write no op 34bde833 a95e29700010 23:27:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x68000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:14 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1cd, 0x0) 23:27:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x800) read(r0, 0x0, 0x2de) 23:27:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000006000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:14 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x600000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf1ffffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:15 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6(0xa, 0x1, 0x0) [ 772.567437][T30463] dlm: dev_write no op 34bde833 a95e29700010 23:27:15 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000007000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xffffa888}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x6c000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x42000, 0x0) close(r0) [ 772.741367][T30781] dlm: dev_write no op 34bde833 a95e29700010 [ 772.836229][ T26] audit: type=1326 audit(1568071635.262:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30777 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x74000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)='ppp0cgroup\x00', 0x0) 23:27:15 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000048000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 23:27:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xfffff000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 772.965472][ T26] audit: type=1326 audit(1568071635.292:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30777 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 773.052057][T31111] dlm: dev_write no op 34bde833 a95e29700010 [ 773.071178][ T26] audit: type=1326 audit(1568071635.302:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30777 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 773.108864][T31189] binder: 31102:31189 ioctl c018620c 0 returned -14 23:27:15 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x700000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:15 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:15 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000004c000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:15 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000040)) ptrace(0x10, r0) ptrace$setsig(0x8, r0, 0x0, 0x0) 23:27:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x7a000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xffffff7f}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 773.314511][ T26] audit: type=1326 audit(1568071635.742:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31413 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 773.353591][T31472] dlm: dev_write no op 34bde833 a95e29700010 23:27:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) 23:27:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xffffff9e}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 773.403451][ T26] audit: type=1326 audit(1568071635.742:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31413 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:27:15 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000060000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xff000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:15 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) [ 773.565949][T31835] dlm: dev_write no op 34bde833 a95e29700010 23:27:16 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x800000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xfffffff0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000068000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:16 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) 23:27:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) [ 773.947033][T32059] dlm: dev_write no op 34bde833 a95e29700010 23:27:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000006c000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:16 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xfffffff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 774.155106][T32272] dlm: dev_write no op 34bde833 a95e29700010 23:27:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000074000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 774.394404][T32486] dlm: dev_write no op 34bde833 a95e29700010 23:27:16 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x1200000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:16 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) socket$inet6(0xa, 0x1, 0x0) 23:27:16 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) 23:27:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x68000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000007a000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:16 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) [ 774.521088][T32499] dlm: dev_write no op 34bde833 a95e29700010 [ 774.530059][T32497] validate_nla: 7 callbacks suppressed [ 774.530067][T32497] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:17 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) socket$inet6(0xa, 0x1, 0x0) 23:27:17 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000030000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x40030000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:17 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) [ 774.732520][T32713] dlm: dev_write no op 34bde833 a95e29700010 [ 774.755423][T32718] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:17 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x3f00000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:17 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000050000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:17 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) socket$inet6(0xa, 0x1, 0x0) 23:27:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:17 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) 23:27:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf0ffffffffffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:17 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) [ 775.075312][ T460] dlm: dev_write no op 34bde833 a95e29700010 [ 775.079068][ T466] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:17 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000060000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x100000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 775.249519][ T644] dlm: dev_write no op 34bde833 a95e29700010 23:27:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 775.408959][ T699] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:18 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x4000000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:18 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000070000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:18 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8d971e9f9cd806a76a374f9ca35172d6794bf5b3d8a9ba7df3a35caa667d8a00", "e151d875408349b91ff1a3de15e35ffbde66d0d59dd54e9d43d24ca8867a14e4", "c474f0b201ee0cac1af182cec1f0a0d7f0d6bd17657d5fba4525c140e9d12202", "1c5163459e01a240bce0dac9a3da9de39af0bce82f120252cca1b444ccd7c87c", "ffe74e0b58d222f15fb4d152c94df68f2ed6d720d27b050446374e111f9c1cc7", "5f4d5adfa03eb4f0de8d161c"}}) 23:27:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x200000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:18 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 775.661089][ T903] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 775.674572][ T907] dlm: dev_write no op 34bde833 a95e29700010 23:27:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 23:27:18 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000200000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x300000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:18 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 775.872744][ T1124] dlm: dev_write no op 34bde833 a95e29700010 [ 775.910714][ T1130] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:18 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0xff00000000000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 23:27:18 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000003f0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:18 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x400000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 23:27:18 executing program 4: seccomp(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 776.257757][ T1356] dlm: dev_write no op 34bde833 a95e29700010 [ 776.272569][ T1357] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:18 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000480000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x500000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x234e000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 776.412521][ T1577] dlm: dev_write no op 34bde833 a95e29700010 23:27:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) [ 776.527408][ T1588] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:19 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0xffffffff00000000, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:19 executing program 4: seccomp(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000004c0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) 23:27:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x600000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) [ 776.838012][ T1823] dlm: dev_write no op 34bde833 a95e29700010 [ 776.848885][ T1821] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:19 executing program 4: seccomp(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000600000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x700000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 776.964513][ T2001] dlm: dev_write no op 34bde833 a95e29700010 23:27:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000680000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 777.115018][ T2042] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 777.191265][ T2133] dlm: dev_write no op 34bde833 a95e29700010 23:27:19 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0xffffffffffff0700, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:19 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x6800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000006c0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x800000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:19 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 777.419044][ T2257] dlm: dev_write no op 34bde833 a95e29700010 23:27:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000740000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 777.474155][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 777.474173][ T26] audit: type=1326 audit(1568071639.902:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2252 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:19 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x900000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 777.623291][ T26] audit: type=1326 audit(1568071639.902:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2252 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:20 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 777.698740][ T2585] dlm: dev_write no op 34bde833 a95e29700010 [ 777.761561][ T26] audit: type=1326 audit(1568071639.902:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2252 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:20 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:20 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000007a0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:20 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xa00000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x7400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:20 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000001ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 778.057602][ T2817] dlm: dev_write no op 34bde833 a95e29700010 [ 778.067288][ T26] audit: type=1326 audit(1568071640.492:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2809 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xb00000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 778.193210][ T26] audit: type=1326 audit(1568071640.532:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2809 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 778.221030][ T3113] dlm: dev_write no op 34bde833 a95e29700010 23:27:20 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x7a00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:20 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 778.271173][ T26] audit: type=1326 audit(1568071640.532:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2809 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 778.380690][ T26] audit: type=1326 audit(1568071640.812:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3147 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 778.490540][ T26] audit: type=1326 audit(1568071640.842:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3147 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 778.604913][ T26] audit: type=1326 audit(1568071640.842:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3147 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:21 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000002ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:21 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xff00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x50) sendto$inet6(r1, &(0x7f0000000000)="09000000062d000000000200c52c", 0xe, 0x0, 0x0, 0x0) 23:27:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xc00000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:21 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 778.749925][ T3522] dlm: dev_write no op 34bde833 a95e29700010 23:27:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000003ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xe00000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0xff}, 0x1c) 23:27:21 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 778.902483][ T3755] dlm: dev_write no op 34bde833 a95e29700010 23:27:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000004ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 779.029481][ T26] audit: type=1326 audit(1568071641.462:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3849 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x0 [ 779.093265][ T4018] dlm: dev_write no op 34bde833 a95e29700010 23:27:21 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) syz_open_dev$midi(0x0, 0x0, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:27:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf00000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0}, 0xff}, 0x1c) 23:27:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000005ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000006ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 779.293721][ T4067] dlm: dev_write no op 34bde833 a95e29700010 23:27:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0}, 0xff}, 0x1c) 23:27:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x1000000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 779.413128][ T4362] dlm: dev_write no op 34bde833 a95e29700010 23:27:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000007ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:21 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40505330, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getgid() getgid() getresuid(0x0, &(0x7f00000001c0), 0x0) getresuid(0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00', 0x19, 0x4, 0x0, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0}, 0x50) [ 779.614516][ T4538] dlm: dev_write no op 34bde833 a95e29700010 23:27:22 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x1100000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000020ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0}, 0xff}, 0x1c) 23:27:22 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40505330, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getgid() getgid() getresuid(0x0, &(0x7f00000001c0), 0x0) getresuid(0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00', 0x19, 0x4, 0x0, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0}, 0x50) 23:27:22 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 779.854882][ T4702] dlm: dev_write no op 34bde833 a95e29700010 [ 779.860939][ T4698] validate_nla: 8 callbacks suppressed [ 779.860948][ T4698] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0}, 0xff}, 0x1c) 23:27:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c09, 0x0) 23:27:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x1200000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000003fff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 780.061677][ T4954] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924921ae, 0x0) 23:27:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0}, 0xff}, 0x1c) [ 780.230940][ T5202] dlm: dev_write no op 34bde833 a95e29700010 23:27:23 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x1300000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:23 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x200000000003) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 23:27:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000048ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:23 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0}, 0xff}, 0x1c) [ 780.705772][ T5439] dlm: dev_write no op 34bde833 a95e29700010 [ 780.721428][ T5444] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:23 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffff7, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 23:27:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0}, 0xff}, 0x1c) 23:27:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000004cff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x1400000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 780.906708][ T5678] dlm: dev_write no op 34bde833 a95e29700010 [ 780.943089][ T5701] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:23 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x18000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:27:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x0}, 0xff}, 0x1c) 23:27:24 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:24 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000060ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x2000000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:24 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x0}, 0xff}, 0x1c) 23:27:24 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfffffffffffffffe], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 781.635514][ T6100] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 781.647916][ T6166] dlm: dev_write no op 34bde833 a95e29700010 23:27:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x0}, 0xff}, 0x1c) 23:27:24 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000068ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:24 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x3f00000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 781.868047][ T6382] dlm: dev_write no op 34bde833 a95e29700010 23:27:24 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x0}, 0xff}, 0x1c) [ 781.924255][ T6408] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:24 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000006cff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:24 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x4000000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 782.102403][ T6582] dlm: dev_write no op 34bde833 a95e29700010 23:27:24 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:24 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000074ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:24 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007021dfffd946f61050002a680001f00000000000100080007000400ff7e", 0x24}], 0x1}, 0x0) 23:27:24 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 23:27:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x0}, 0xff}, 0x1c) [ 782.291968][ T6739] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 782.327053][ T6746] dlm: dev_write no op 34bde833 a95e29700010 23:27:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x6f, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) 23:27:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x0}, 0xff}, 0x1c) 23:27:24 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000007aff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x4800000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:24 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 782.558517][ T6982] dlm: dev_write no op 34bde833 a95e29700010 [ 782.593726][ T7051] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:25 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 782.607168][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 782.607181][ T26] audit: type=1326 audit(1568071645.032:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:27:25 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 782.668130][ T26] audit: type=1326 audit(1568071645.032:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 782.812741][ T26] audit: type=1326 audit(1568071645.032:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 782.856512][ T26] audit: type=1326 audit(1568071645.032:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=336 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:27:25 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x12, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:25 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000020000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x0}, 0xff}, 0x1c) 23:27:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x4c00000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:25 executing program 4: 23:27:25 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 782.964248][ T26] audit: type=1326 audit(1568071645.032:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 782.987459][ T26] audit: type=1326 audit(1568071645.032:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:27:25 executing program 4: [ 783.041935][ T7393] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 783.055029][ T26] audit: type=1326 audit(1568071645.032:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 783.085260][ T7397] dlm: dev_write no op 34bde833 a95e29700010 23:27:25 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:25 executing program 4: 23:27:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0x0}, 0xff}, 0x1c) 23:27:25 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000030000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 783.157432][ T26] audit: type=1326 audit(1568071645.032:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:27:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6000000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 783.299377][ T7613] dlm: dev_write no op 34bde833 a95e29700010 [ 783.313248][ T26] audit: type=1326 audit(1568071645.082:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 783.396034][ T7664] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 783.419072][ T26] audit: type=1326 audit(1568071645.082:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:27:26 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x300, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:26 executing program 4: 23:27:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000040000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:26 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0x0}, 0xff}, 0x1c) 23:27:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6558000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:26 executing program 4: 23:27:26 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 783.627147][ T7831] dlm: dev_write no op 34bde833 a95e29700010 23:27:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000050000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0xb) r1 = dup2(r0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendmsg$unix(r3, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20007ffc) clone(0x2102041ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r3, 0x0, 0x0, 0x4001, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) 23:27:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6800000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 783.804654][ T8045] dlm: dev_write no op 34bde833 a95e29700010 23:27:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000060000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:26 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x500, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:26 executing program 4: 23:27:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6c00000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0x0}, 0xff}, 0x1c) 23:27:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 784.148394][ T8270] dlm: dev_write no op 34bde833 a95e29700010 23:27:26 executing program 4: 23:27:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000070000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x7400000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:26 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 784.337460][ T8485] dlm: dev_write no op 34bde833 a95e29700010 23:27:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000480000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:26 executing program 4: [ 784.485462][ T8545] dlm: dev_write no op 34bde833 a95e29700010 23:27:27 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x600, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:27 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:27 executing program 4: 23:27:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x7a00000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:27 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000004c0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x234e], 0x0, 0x0}, 0xff}, 0x1c) [ 784.691406][ T8710] dlm: dev_write no op 34bde833 a95e29700010 23:27:27 executing program 4: 23:27:27 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x8100000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:27 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000600000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800], 0x0, 0x0}, 0xff}, 0x1c) 23:27:27 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x700, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 784.871935][ T8926] validate_nla: 5 callbacks suppressed [ 784.871943][ T8926] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:27 executing program 4: [ 784.956223][ T8933] dlm: dev_write no op 34bde833 a95e29700010 23:27:27 executing program 5: seccomp(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:27 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000680000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:27 executing program 5: seccomp(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:27 executing program 4: [ 785.164194][ T9152] dlm: dev_write no op 34bde833 a95e29700010 23:27:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x88a8ffff00000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:27 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000006c0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:27 executing program 4: [ 785.316961][ T9243] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e23], 0x0, 0x0}, 0xff}, 0x1c) 23:27:27 executing program 5: seccomp(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 785.381636][ T9271] dlm: dev_write no op 34bde833 a95e29700010 23:27:28 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1200, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:28 executing program 4: 23:27:28 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000740000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x9effffff00000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800], 0x0, 0x0}, 0xff}, 0x1c) 23:27:28 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:28 executing program 4: 23:27:28 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 785.675742][ T9490] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 785.685257][ T9491] dlm: dev_write no op 34bde833 a95e29700010 23:27:28 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000007a0000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xdc15000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:28 executing program 4: [ 785.866892][ T9711] dlm: dev_write no op 34bde833 a95e29700010 [ 785.937243][ T9717] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:28 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3f00, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:28 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:28 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000300ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:28 executing program 4: 23:27:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400], 0x0, 0x0}, 0xff}, 0x1c) 23:27:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf0ffffff00000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:28 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:28 executing program 4: [ 786.191279][ T9979] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 786.218349][ T9985] dlm: dev_write no op 34bde833 a95e29700010 23:27:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:28 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:28 executing program 4: 23:27:28 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000500ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 786.501738][T10372] dlm: dev_write no op 34bde833 a95e29700010 23:27:29 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf1ffffff00000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000600ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:29 executing program 4: 23:27:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:29 executing program 4: 23:27:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 786.704907][T10429] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 786.730172][T10432] dlm: dev_write no op 34bde833 a95e29700010 23:27:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000700ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xffffff7f00000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:29 executing program 4: [ 786.895044][T10660] dlm: dev_write no op 34bde833 a95e29700010 [ 787.022511][T10769] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:29 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0xff00, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000002000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:29 executing program 4: 23:27:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xffffffff00000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:29 executing program 4: [ 787.251787][T10894] dlm: dev_write no op 34bde833 a95e29700010 [ 787.266973][T10885] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000003f00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:29 executing program 4: 23:27:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xfffffffffffff000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 787.428086][T11098] dlm: dev_write no op 34bde833 a95e29700010 [ 787.520954][T11208] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:30 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:30 executing program 4: 23:27:30 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000004800ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:30 executing program 4: [ 787.753446][T11417] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 787.794002][T11440] dlm: dev_write no op 34bde833 a95e29700010 23:27:30 executing program 4: 23:27:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000004c00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:30 executing program 4: [ 788.082987][T11779] dlm: dev_write no op 34bde833 a95e29700010 23:27:30 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:30 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:30 executing program 4: 23:27:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000006000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 788.292993][T11959] dlm: dev_write no op 34bde833 a95e29700010 [ 788.331807][ T26] kauditd_printk_skb: 77 callbacks suppressed 23:27:30 executing program 4: [ 788.331819][ T26] audit: type=1326 audit(1568071650.752:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11956 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x0 23:27:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000006800ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:30 executing program 4: 23:27:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0x0}, 0xff}, 0x1c) [ 788.555218][T12321] dlm: dev_write no op 34bde833 a95e29700010 23:27:31 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:31 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:31 executing program 4: 23:27:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000006c00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:31 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:31 executing program 4: [ 789.136814][T12513] dlm: dev_write no op 34bde833 a95e29700010 23:27:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x234e0000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000007400ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 789.179760][ T26] audit: type=1326 audit(1568071651.602:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12538 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x0 23:27:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:31 executing program 4: 23:27:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000007a00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 789.303055][T12738] dlm: dev_write no op 34bde833 a95e29700010 [ 789.429879][T12921] dlm: dev_write no op 34bde833 a95e29700010 23:27:32 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:32 executing program 4: 23:27:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:32 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000200ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:32 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x5000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:32 executing program 4: [ 790.003864][T12973] validate_nla: 5 callbacks suppressed [ 790.003873][T12973] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 790.017962][T12979] dlm: dev_write no op 34bde833 a95e29700010 23:27:32 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000300ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 790.100061][ T26] audit: type=1326 audit(1568071652.532:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12998 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:32 executing program 4: 23:27:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 790.212611][ T26] audit: type=1326 audit(1568071652.532:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12998 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 790.245196][T13304] dlm: dev_write no op 34bde833 a95e29700010 23:27:32 executing program 4: [ 790.270782][T13316] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:32 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:32 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000400ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 790.304008][ T26] audit: type=1326 audit(1568071652.532:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12998 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:32 executing program 4: [ 790.403444][ T26] audit: type=1326 audit(1568071652.782:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13365 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:32 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 790.453645][T13529] dlm: dev_write no op 34bde833 a95e29700010 [ 790.566344][ T26] audit: type=1326 audit(1568071652.782:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13365 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:33 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x6000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:33 executing program 4: 23:27:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000500ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 790.687897][T13674] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:33 executing program 4: 23:27:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000], 0x0, 0x0}, 0xff}, 0x1c) [ 790.721409][ T26] audit: type=1326 audit(1568071652.782:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13365 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 790.765237][T13745] dlm: dev_write no op 34bde833 a95e29700010 23:27:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000600ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 790.808261][ T26] audit: type=1326 audit(1568071652.782:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13365 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000], 0x0, 0x0}, 0xff}, 0x1c) [ 790.896564][ T26] audit: type=1326 audit(1568071652.782:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13365 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=336 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:33 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002d000500d25a80648c63940f0124fc001000024002020000053582c137107c3709000180f0000000d1bd", 0x2e}], 0x1}, 0x0) [ 791.011927][T13964] dlm: dev_write no op 34bde833 a95e29700010 23:27:33 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 791.052415][T13992] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:33 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x7000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc75000000000000, 0x0, 0x600]}, 0x2c) 23:27:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000700ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:33 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 791.306024][T14183] dlm: dev_write no op 34bde833 a95e29700010 [ 791.310457][T14186] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000004800ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:33 executing program 4: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) 23:27:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:33 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 791.485282][T14555] dlm: dev_write no op 34bde833 a95e29700010 23:27:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000004c00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 791.675117][T14807] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 791.715780][T14835] dlm: dev_write no op 34bde833 a95e29700010 23:27:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:34 executing program 4: socket(0x11, 0xa, 0x300) syz_emit_ethernet(0x300036, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000069ddffbfffff0002060000000000000000000000ffffe0000002ff05000000000000000000f5ffffff01880090780009040060b680fa00000000000000ffffffff09000000000000000000f3ffffffac14ffbb000000000000006eb6e7dd787aa76c4cf3389463954bf35921d993fabe5fbe97ee77387021541c1fcdf8f124bacd03f793ca74111fb22edde59a41615013b8224f425653f8e36b8b9f5407e0d1995cf7f951fc754122a4ae89996157f7c5c6e16bd15945075fa619212f41d6e82ef66c187d8c6617ee22f1a1b1637d076fe92f959b5b4900dbaee5ca56446a2c7b4d458bee19857cf78084266625cbb00520d8a4af96dfeaa53286ba54e1d790ff6d37b1cba596155dcadcdde1388e2f329b2291adddaeb6790b4064234237e1dc9090f14734bace257657f304d93f3b079d5b4e1001eb03508d0c982aec5a9563267011ad26602f85c361f73fddad43c4e78262192f3a08464fc2756df5829aed76a98fd3670a8692996abd88a8596c063cd3863b0958814489f90b9b9fd503f9727f3eb8718d4bf050d28f3fab8021b11efe60abc0afea1565ab0f598cdeadb53428b86081d46f616866520000000000000000000000cb178fbf713ac812769e7f940b9a84c82029fefc7594d947001833f3a0d7355186552f8001a3cccf64b5f054829e1eb98684ac5aa82229f21fb37dabd4a04e0a9a3c7a98f0b6b88172b132f3ca2adbc4389080a06f0db75388cffc6cd518c497b4f6f4a60c35ab256ffe7889e1656ee82964d885f892299b5cf0d8a821c0f7cf74d24c4fdfa1e226"], 0x0) 23:27:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000006000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:34 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x8000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 791.892070][T14924] dlm: dev_write no op 34bde833 a95e29700010 [ 791.910627][T14925] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000006800ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xfffffffffffff000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 792.091225][T15138] dlm: dev_write no op 34bde833 a95e29700010 [ 792.118519][T15150] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 23:27:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000006c00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 792.233367][T15199] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 792.246181][T15222] dlm: dev_write no op 34bde833 a95e29700010 23:27:34 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:34 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x12000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000007400ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:34 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000680000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x11}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:34 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 23:27:35 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000007a00ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 792.576070][T15482] dlm: dev_write no op 34bde833 a95e29700010 [ 792.579620][T15485] dlm: dev_write no op 34bde833 a95e29700010 [ 792.602524][T15487] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:35 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 792.684437][T15501] dlm: dev_write no op 34bde833 a95e29700010 23:27:35 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x12}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:35 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000003ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 792.954069][T15817] dlm: dev_write no op 34bde833 a95e29700010 23:27:35 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000005ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:35 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x13}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:35 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3f000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 793.146558][T15931] dlm: dev_write no op 34bde833 a95e29700010 23:27:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x14}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:35 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000006ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 793.327761][T16220] dlm: dev_write no op 34bde833 a95e29700010 23:27:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/\x02\x00op#\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002be000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r2], 0x2}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x1f, 0x3f, 0x0, 0x0, 0xfffffffffffffffa, 0x5}}, 0x50) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x0) r3 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000200)) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x48}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:36 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000007ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:36 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 793.755060][T16362] dlm: dev_write no op 34bde833 a95e29700010 23:27:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/\x02\x00op#\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002be000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r2], 0x2}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x2, {0x7, 0x1f, 0x3f, 0x0, 0x0, 0xfffffffffffffffa, 0x5}}, 0x50) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x0) r3 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000200)) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127d, 0x0) 23:27:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4c}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:36 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000020ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 794.012983][T16649] dlm: dev_write no op 34bde833 a95e29700010 23:27:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x234e000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:36 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000003fff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:36 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0xff000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 794.237919][T17014] dlm: dev_write no op 34bde833 a95e29700010 23:27:36 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') r2 = syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') sendfile(r1, r2, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb330, 0x0, 0x0, 0x0, 0x9af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8110}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)) r3 = getpgrp(0xffffffffffffffff) sched_setscheduler(r3, 0x3, &(0x7f0000000500)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x647f, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="08f5a9db1287df8ab278c4e73da592c02e16e091a35048e7218a9553558b38120af2") r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x0) getpeername$packet(r5, 0x0, &(0x7f00000002c0)) r6 = fcntl$getown(r5, 0x9) sched_setscheduler(r6, 0x6, &(0x7f0000000280)=0x3ff) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480), 0x106, 0x3}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xfa, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x8, 0x6, 0x4}, &(0x7f00000003c0)=0x3b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x1}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)=r7, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) fstatfs(r4, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x100) ioctl$LOOP_SET_STATUS64(r8, 0x127d, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x100) ioctl$KDGETMODE(r9, 0x4b3b, &(0x7f0000000080)) 23:27:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x60}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:36 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000048ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 794.465998][T17241] dlm: dev_write no op 34bde833 a95e29700010 23:27:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000004cff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x68}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:37 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') r2 = syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') sendfile(r1, r2, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb330, 0x0, 0x0, 0x0, 0x9af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8110}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)) r3 = getpgrp(0xffffffffffffffff) sched_setscheduler(r3, 0x3, &(0x7f0000000500)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x647f, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="08f5a9db1287df8ab278c4e73da592c02e16e091a35048e7218a9553558b38120af2") r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x0) getpeername$packet(r5, 0x0, &(0x7f00000002c0)) r6 = fcntl$getown(r5, 0x9) sched_setscheduler(r6, 0x6, &(0x7f0000000280)=0x3ff) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480), 0x106, 0x3}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xfa, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x8, 0x6, 0x4}, &(0x7f00000003c0)=0x3b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x1}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)=r7, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) fstatfs(r4, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x100) ioctl$LOOP_SET_STATUS64(r8, 0x127d, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x100) ioctl$KDGETMODE(r9, 0x4b3b, &(0x7f0000000080)) [ 794.755304][T17436] dlm: dev_write no op 34bde833 a95e29700010 23:27:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000060ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6c}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 794.995292][T17644] dlm: dev_write no op 34bde833 a95e29700010 [ 795.015535][T17648] validate_nla: 7 callbacks suppressed [ 795.015544][T17648] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:37 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x7ffffffffffff, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000068ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:37 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') r2 = syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') sendfile(r1, r2, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb330, 0x0, 0x0, 0x0, 0x9af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8110}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)) r3 = getpgrp(0xffffffffffffffff) sched_setscheduler(r3, 0x3, &(0x7f0000000500)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x647f, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="08f5a9db1287df8ab278c4e73da592c02e16e091a35048e7218a9553558b38120af2") r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x0) getpeername$packet(r5, 0x0, &(0x7f00000002c0)) r6 = fcntl$getown(r5, 0x9) sched_setscheduler(r6, 0x6, &(0x7f0000000280)=0x3ff) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480), 0x106, 0x3}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xfa, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x8, 0x6, 0x4}, &(0x7f00000003c0)=0x3b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x1}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)=r7, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) fstatfs(r4, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x100) ioctl$LOOP_SET_STATUS64(r8, 0x127d, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x100) ioctl$KDGETMODE(r9, 0x4b3b, &(0x7f0000000080)) 23:27:37 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') r2 = syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') sendfile(r1, r2, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb330, 0x0, 0x0, 0x0, 0x9af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8110}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)) r3 = getpgrp(0xffffffffffffffff) sched_setscheduler(r3, 0x3, &(0x7f0000000500)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x647f, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="08f5a9db1287df8ab278c4e73da592c02e16e091a35048e7218a9553558b38120af2") r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x0) getpeername$packet(r5, 0x0, &(0x7f00000002c0)) r6 = fcntl$getown(r5, 0x9) sched_setscheduler(r6, 0x6, &(0x7f0000000280)=0x3ff) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480), 0x106, 0x3}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xfa, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x8, 0x6, 0x4}, &(0x7f00000003c0)=0x3b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x1}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)=r7, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) fstatfs(r4, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x100) ioctl$LOOP_SET_STATUS64(r8, 0x127d, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x100) ioctl$KDGETMODE(r9, 0x4b3b, &(0x7f0000000080)) 23:27:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x74}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 795.379104][T17948] dlm: dev_write no op 34bde833 a95e29700010 [ 795.404448][T18053] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x7a}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000006cff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 795.604946][T18285] dlm: dev_write no op 34bde833 a95e29700010 [ 795.621418][T18286] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:38 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000074ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf0}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:38 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x100000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 795.849536][T18503] dlm: dev_write no op 34bde833 a95e29700010 [ 795.859601][T18501] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0xf000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:38 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000007aff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:38 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') r2 = syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') sendfile(r1, r2, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb330, 0x0, 0x0, 0x0, 0x9af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8110}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)) r3 = getpgrp(0xffffffffffffffff) sched_setscheduler(r3, 0x3, &(0x7f0000000500)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x647f, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="08f5a9db1287df8ab278c4e73da592c02e16e091a35048e7218a9553558b38120af2") r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x0) getpeername$packet(r5, 0x0, &(0x7f00000002c0)) r6 = fcntl$getown(r5, 0x9) sched_setscheduler(r6, 0x6, &(0x7f0000000280)=0x3ff) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480), 0x106, 0x3}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xfa, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x8, 0x6, 0x4}, &(0x7f00000003c0)=0x3b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x1}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)=r7, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) fstatfs(r4, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x100) ioctl$LOOP_SET_STATUS64(r8, 0x127d, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x100) ioctl$KDGETMODE(r9, 0x4b3b, &(0x7f0000000080)) 23:27:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x300}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 796.087626][T18625] dlm: dev_write no op 34bde833 a95e29700010 [ 796.116167][T18639] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:38 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000002ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0xff}, 0x1c) [ 796.171438][T18707] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 23:27:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x500}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:38 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x81, 0x418040) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x444042, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x20}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x80000, 0x0) open_by_handle_at(r2, &(0x7f0000000300)={0x8, 0x61}, 0x416002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) open(&(0x7f0000000100)='./file0\x00', 0x408200, 0x168) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(0xffffffffffffffff, r7, 0x0, 0x80001d00c0d7) r8 = syz_open_dev$loop(0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000140)='t\bnu\x00\x00\x00\x00\t\a\x94\xbbg\xa6tU\x05', 0xb) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x127d, 0x0) [ 796.292164][T18839] dlm: dev_write no op 34bde833 a95e29700010 23:27:38 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000003ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0}, 0xff}, 0x1c) [ 796.408617][T18923] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:38 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x200000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x600}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 796.567165][T19103] dlm: dev_write no op 34bde833 a95e29700010 23:27:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000004ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0}, 0xff}, 0x1c) [ 796.720456][T19263] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6558}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 796.825128][T19295] dlm: dev_write no op 34bde833 a95e29700010 23:27:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0}, 0xff}, 0x1c) 23:27:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000005ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x680}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x0, 0x6c}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 797.011706][T19474] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 797.033830][T19483] dlm: dev_write no op 34bde833 a95e29700010 23:27:39 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 797.087336][T19500] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000006ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0}, 0xff}, 0x1c) 23:27:39 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x300000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x700}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:39 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000007a000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 797.256990][T19695] dlm: dev_write no op 34bde833 a95e29700010 23:27:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000007ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0}, 0xff}, 0x1c) [ 797.363438][T19745] dlm: plock device version mismatch: kernel (1.2.0), user (1.2046820352.0) 23:27:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0xff}, 0x1c) [ 797.472962][T19977] dlm: dev_write no op 34bde833 a95e29700010 23:27:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x900}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000048ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:40 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 797.631553][T20120] dlm: dev_write no op 34bde833 a95e29700010 23:27:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0}, 0xff}, 0x1c) 23:27:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000004cff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:40 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x400000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xa00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0}, 0xff}, 0x1c) [ 797.871565][T20334] dlm: dev_write no op 34bde833 a95e29700010 23:27:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000060ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xb00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x0}, 0xff}, 0x1c) 23:27:40 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 798.117778][T20734] dlm: dev_write no op 34bde833 a95e29700010 23:27:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000068ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xc00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x0}, 0xff}, 0x1c) [ 798.279931][T20953] dlm: dev_write no op 34bde833 a95e29700010 23:27:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000006cff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:40 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x500000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:40 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xe00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 798.493347][T21174] dlm: dev_write no op 34bde833 a95e29700010 23:27:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x0}, 0xff}, 0x1c) 23:27:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000074ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:41 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x5460, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 798.696544][T21429] dlm: dev_write no op 34bde833 a95e29700010 23:27:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000007aff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x900000000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x0}, 0xff}, 0x1c) 23:27:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1100}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 798.912122][T21797] dlm: dev_write no op 34bde833 a95e29700010 23:27:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0282b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 799.116862][T22022] dlm: dev_write no op 34bde833 a95e29700010 23:27:41 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x600000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:41 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1200}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x0}, 0xff}, 0x1c) 23:27:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0382b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:41 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x5460, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 799.279334][T22124] dlm: dev_write no op 34bde833 a95e29700010 23:27:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1300}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0482b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x0}, 0xff}, 0x1c) 23:27:41 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:42 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x5460, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1400}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 799.581566][T22657] dlm: dev_write no op 34bde833 a95e29700010 23:27:42 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x700000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:42 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0582b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x0}, 0xff}, 0x1c) 23:27:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x15dc}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:42 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:42 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 799.962883][T23078] dlm: dev_write no op 34bde833 a95e29700010 23:27:42 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0682b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0x0}, 0xff}, 0x1c) 23:27:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x2000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 800.148332][T23297] dlm: dev_write no op 34bde833 a95e29700010 [ 800.178136][T23365] validate_nla: 14 callbacks suppressed [ 800.178145][T23365] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:42 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0782b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x40030000000000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x3f00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 800.349902][T23710] dlm: dev_write no op 34bde833 a95e29700010 [ 800.410211][T23714] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 800.423797][T23717] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 23:27:43 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x800000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0x0}, 0xff}, 0x1c) 23:27:43 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:43 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff4882b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:43 executing program 4: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, 0x1, {{0x1, 0xffffffffffffff42, 0x0, r2}}}, 0x28) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0x0, 0x2}, 0x90) 23:27:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 800.601021][T23828] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 800.602379][T23832] dlm: dev_write no op 34bde833 a95e29700010 23:27:43 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff4c82b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0x0}, 0xff}, 0x1c) 23:27:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4800}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:43 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {0x80060000}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 800.831852][T24149] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 800.846817][T24150] dlm: dev_write no op 34bde833 a95e29700010 23:27:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4c00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 800.956392][T24330] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 801.053957][T24401] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:43 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1200000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:43 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff6082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:43 executing program 4 (fault-call:1 fault-nth:0): seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:43 executing program 5 (fault-call:2 fault-nth:0): seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:27:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x5865}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 801.243209][T24575] dlm: dev_write no op 34bde833 a95e29700010 23:27:43 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff6882b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 801.287450][T24619] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e], 0x0, 0x0}, 0xff}, 0x1c) 23:27:43 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 801.383162][ T26] kauditd_printk_skb: 85 callbacks suppressed [ 801.383175][ T26] audit: type=1326 audit(1568071663.812:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24569 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 801.431323][T24963] dlm: dev_write no op 34bde833 a95e29700010 23:27:43 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff6c82b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:44 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 801.508038][T24990] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 801.529640][ T26] audit: type=1326 audit(1568071663.852:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24569 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 801.682547][ T26] audit: type=1326 audit(1568071663.852:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24569 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 801.688405][T25181] dlm: dev_write no op 34bde833 a95e29700010 [ 801.777581][ T26] audit: type=1326 audit(1568071664.062:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24995 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 801.852778][ T26] audit: type=1326 audit(1568071664.062:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24995 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:27:44 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3f00000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800], 0x0, 0x0}, 0xff}, 0x1c) 23:27:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6558}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:44 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$RTC_IRQP_SET(r1, 0x4004700c, 0x1bb3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:44 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x2, 0x1, 0x0) 23:27:44 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff7482b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 801.882507][ T26] audit: type=1326 audit(1568071664.062:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24995 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 801.916279][ T26] audit: type=1326 audit(1568071664.142:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25216 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 801.953889][T25307] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 801.998524][T25386] dlm: dev_write no op 34bde833 a95e29700010 [ 802.004737][ T26] audit: type=1326 audit(1568071664.142:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25216 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00], 0x0, 0x0}, 0xff}, 0x1c) [ 802.004767][ T26] audit: type=1326 audit(1568071664.142:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25216 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:44 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x3, 0x1, 0x0) 23:27:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6800}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 802.095689][ T26] audit: type=1326 audit(1568071664.142:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25216 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:44 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff7a82b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:44 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0xffffffffffffff8e, 0x8, 0x7fffffff}, {0x4, 0xadfe, 0xffff, 0x9}, {0x6, 0x2, 0x3, 0x4b3a}, {0x3, 0x4, 0xfff, 0x5}, {0x1, 0x71e, 0x40e, 0x4}, {0x10001, 0xffffffff, 0x2}, {0x4, 0xfffffffffffff674, 0x4, 0x200}]}) 23:27:44 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x4, 0x1, 0x0) [ 802.333329][T26019] dlm: dev_write no op 34bde833 a95e29700010 23:27:45 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4000000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e23], 0x0, 0x0}, 0xff}, 0x1c) 23:27:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6c00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:45 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4096aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:45 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x5, 0x1, 0x0) [ 802.587580][T26147] dlm: dev_write no op 34bde833 a95e29700010 23:27:45 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc40a6aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x7400}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800], 0x0, 0x0}, 0xff}, 0x1c) [ 802.720545][T26425] dlm: dev_write no op 34bde833 a95e29700010 23:27:45 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x6, 0x1, 0x0) 23:27:45 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4256aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 802.919203][T26679] dlm: dev_write no op 34bde833 a95e29700010 23:27:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x7a00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:45 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4306aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:45 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x7, 0x1, 0x0) 23:27:45 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/243, &(0x7f0000000000)=0xf3) 23:27:45 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0xff00000000000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 803.243052][T26879] dlm: dev_write no op 34bde833 a95e29700010 23:27:45 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4376aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x8100}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400], 0x0, 0x0}, 0xff}, 0x1c) 23:27:45 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x8, 0x1, 0x0) [ 803.506125][T27328] dlm: dev_write no op 34bde833 a95e29700010 23:27:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r4, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x7, 0x4, 0x9, 0x4, 0x8f8, 0x3f5, 0x7, r5}, 0x20) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xdc15}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:46 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4426aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:46 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x9, 0x1, 0x0) 23:27:46 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x8, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x7ff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0xcc8576be766b093b, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000), &(0x7f0000000080)=0x4) 23:27:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 803.752304][T27799] dlm: dev_write no op 34bde833 a95e29700010 23:27:46 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0xffffffff00000000, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:46 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4636aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00], 0x0, 0x0}, 0xff}, 0x1c) 23:27:46 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xb, 0x1, 0x0) 23:27:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x34000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:46 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000}, 0x1000, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 804.081491][T28241] dlm: dev_write no op 34bde833 a95e29700010 23:27:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:46 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82010, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x400300}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:46 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa60af737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:46 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xc, 0x1, 0x0) 23:27:46 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) write$FUSE_POLL(r1, &(0x7f0000000100)={0x18, 0x0, 0x8, {0x6}}, 0x18) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xe21c, 0x400000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66cb7fac, 0x0, 0x0, 0x7, 0x10000, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, r2, 0xb) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x101000, 0x0) [ 804.370719][T28569] dlm: dev_write no op 34bde833 a95e29700010 23:27:47 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0xffffffffffff0700, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa625f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf0ffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:47 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xd, 0x1, 0x0) 23:27:47 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) [ 804.677940][T28990] dlm: dev_write no op 34bde833 a95e29700010 23:27:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f70abe0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:47 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xe, 0x1, 0x0) 23:27:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:47 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 804.917935][T29317] dlm: dev_write no op 34bde833 a95e29700010 23:27:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x2000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f742be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:47 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x1, 0x0) 23:27:47 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:47 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@empty]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x3000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 805.292323][T29819] validate_nla: 12 callbacks suppressed [ 805.292332][T29819] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 805.307640][T29822] dlm: dev_write no op 34bde833 a95e29700010 23:27:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0533e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:47 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x11, 0x1, 0x0) 23:27:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:47 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x320c0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x1) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 805.496072][T30233] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0933e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 805.577867][T30252] dlm: dev_write no op 34bde833 a95e29700010 23:27:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x5000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:48 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x12, 0x1, 0x0) 23:27:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0x0}, 0xff}, 0x1c) [ 805.751291][T30647] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 805.791072][T30651] dlm: dev_write no op 34bde833 a95e29700010 23:27:48 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:48 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be4233e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:48 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x2c, 0x1, 0x0) 23:27:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0x0}, 0xff}, 0x1c) [ 805.971909][T30890] dlm: dev_write no op 34bde833 a95e29700010 23:27:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be6333e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:48 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xac, 0x1, 0x0) 23:27:48 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 806.179754][T31221] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 806.255436][T31338] dlm: dev_write no op 34bde833 a95e29700010 23:27:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0610000000100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0x0}, 0xff}, 0x1c) [ 806.437950][T31563] dlm: dev_write no op 10 a95e29700010 23:27:49 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x7000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:49 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x48200, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x6, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1, 0x5, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, {{0x2, 0x4e24, @empty}}]}, 0x30c) 23:27:49 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x167, 0x1, 0x0) 23:27:49 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0609e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e0000], 0x0, 0x0}, 0xff}, 0x1c) [ 806.623041][ T26] kauditd_printk_skb: 664 callbacks suppressed [ 806.623055][ T26] audit: type=1326 audit(1568071669.052:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 806.654816][T31704] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000], 0x0, 0x0}, 0xff}, 0x1c) [ 806.673774][T31809] dlm: dev_write no op 34bde809 a95e29700010 23:27:49 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be060ae8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:49 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x187, 0x1, 0x0) [ 806.760353][ T26] audit: type=1326 audit(1568071669.052:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:49 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x8000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 806.861419][T32188] dlm: dev_write no op 34bde80a a95e29700010 [ 806.913708][ T26] audit: type=1326 audit(1568071669.052:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000], 0x0, 0x0}, 0xff}, 0x1c) [ 806.987909][T32231] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 806.997911][ T26] audit: type=1326 audit(1568071669.092:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 807.033147][ T26] audit: type=1326 audit(1568071669.092:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=336 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 807.136405][ T26] audit: type=1326 audit(1568071669.092:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 807.159837][ T26] audit: type=1326 audit(1568071669.092:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:49 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:49 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0625e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x9000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:49 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x3, 0x4) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0x1, 0x4) 23:27:49 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x6280, 0x1, 0x0) 23:27:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000], 0x0, 0x0}, 0xff}, 0x1c) [ 807.257703][ T26] audit: type=1326 audit(1568071669.092:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 807.281825][ T26] audit: type=1326 audit(1568071669.092:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 807.348796][T32642] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 807.357039][T32645] dlm: dev_write no op 34bde825 a95e29700010 23:27:49 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0630e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 807.397337][ T26] audit: type=1326 audit(1568071669.092:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31700 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:49 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x5d76dff0, 0x1, 0x0) 23:27:49 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) socketpair(0x6d9fb5dee5e1cf3, 0x80000, 0x9, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) getdents64(r1, &(0x7f0000000100)=""/141, 0x8d) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 23:27:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xa000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 807.544082][ T588] dlm: dev_write no op 34bde830 a95e29700010 23:27:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0637e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 807.635845][ T638] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 807.723006][ T910] dlm: dev_write no op 34bde837 a95e29700010 23:27:50 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) 23:27:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0642e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) fcntl$setlease(r0, 0x400, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x7}, 0x2, 0x401}) 23:27:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xb000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 807.949633][ T1012] dlm: dev_write no op 34bde842 a95e29700010 [ 807.971333][ T1017] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0663e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xc000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x2, {0x1}}, 0x18) 23:27:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) [ 808.163396][ T1446] dlm: dev_write no op 34bde863 a95e29700010 [ 808.210248][ T1451] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd0a100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 808.387084][ T1883] dlm: dev_write no op abde833 a95e29700010 23:27:50 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x9, 0x0) 23:27:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xe000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd42100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 808.569034][ T1895] dlm: dev_write no op 42bde833 a95e29700010 23:27:51 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='#\x00', &(0x7f0000000100)='!lo:@ppp1.\x00', &(0x7f0000000140)='*bdev}\x00', &(0x7f0000000180)='eth1system\x00', &(0x7f00000001c0)='ppp1\x00', &(0x7f0000000200)='{\'+\x00'], &(0x7f0000000280)) 23:27:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100000000000000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:51 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x0) [ 808.795027][ T2237] dlm: dev_write no op 34bde833 10 23:27:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd340a0070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 808.994568][ T2487] dlm: dev_write no op 34bde833 a95e2970000a 23:27:51 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x28, &(0x7f0000000140)}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={r4, 0x20, "32766cde5cbfe11bb1f80632b1fe861142b333ddf38030e16d0588ebc99d4d5a"}, &(0x7f0000000040)=0x28) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0x1}, 0x8) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x10000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34120070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:51 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xc, 0x0) [ 809.214799][ T2699] dlm: dev_write no op 34bde833 a95e29700012 23:27:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd342f0070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x11000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:51 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xf, 0x0) 23:27:51 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x200200) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r3, 0x3}, &(0x7f0000000100)=0x8) [ 809.408292][ T3076] dlm: dev_write no op 34bde833 a95e2970002f 23:27:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34420070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 809.588455][ T3483] dlm: dev_write no op 34bde833 a95e29700042 23:27:52 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x12000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:52 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x63, 0x0) 23:27:52 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x100, 0x4) socketpair(0x9, 0x80000, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=0x1, 0x4) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x224400) 23:27:52 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd3410000a295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 809.776855][ T3560] dlm: dev_write no op 34bde833 a95e290a0010 23:27:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x13000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:52 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100025295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:52 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x300, 0x0) 23:27:52 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 810.003000][ T4034] dlm: dev_write no op 34bde833 a95e29250010 23:27:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:52 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:52 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100270295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:52 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = getpid() getpriority(0xfffffffffffffffe, r0) ptrace$cont(0x18, r0, 0x2, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000280)=0xbd) r5 = getuid() sendmsg$nl_xfrm(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@polexpire={0x32f, 0x1b, 0x10, 0x70bd28, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, [], 0x21}, @in6=@mcast1, 0x4e21, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x0, 0x2f, r4, r5}, {0x4, 0x2, 0xf750, 0x100, 0x1000, 0xd14, 0x5, 0x2}, {0x6, 0x1, 0x80000000, 0x1f}, 0x1, 0x6e6bc0, 0x3, 0x1, 0x3}, 0x3}, [@algo_comp={0x64, 0x3, {{'deflate\x00'}, 0xe0, "20e9d22e4c679bc17fb999c27694abf01737489cdbf6136a26b1a52f"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@mcast1, 0x4, r4}) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000100)) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) r6 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r7 = getpid() getpriority(0xfffffffffffffffe, r7) write$cgroup_pid(r6, &(0x7f0000000040)=r7, 0x12) 23:27:52 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x69c, 0x0) 23:27:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x14000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 810.367808][ T4409] dlm: dev_write no op 34bde833 a95e29700210 [ 810.378544][ T4405] validate_nla: 6 callbacks suppressed [ 810.378553][ T4405] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:52 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100370295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x20000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:52 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6a0, 0x0) 23:27:53 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x20, 0x101000) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x2, 0x4) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) getsockopt$packet_int(r1, 0x107, 0x28, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x200000000000000, 0x200) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000180)) 23:27:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 810.575057][ T4819] dlm: dev_write no op 34bde833 a95e29700310 [ 810.627705][ T4821] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:53 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100470295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 810.751643][ T5013] dlm: dev_write no op 34bde833 a95e29700410 23:27:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x3f000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:53 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x2) 23:27:53 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:53 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100570295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:53 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000040)={0xa86}, 0x8, 0x80000) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) [ 810.931335][ T5240] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 810.964722][ T5257] dlm: dev_write no op 34bde833 a95e29700510 23:27:53 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100670295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x40000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:53 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x3) [ 811.161708][ T5560] dlm: dev_write no op 34bde833 a95e29700610 23:27:53 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100770295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 811.232235][ T5625] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:53 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) ioctl$sock_ifreq(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', @ifru_settings={0x7, 0x9b5, @fr=&(0x7f0000000000)={0xe847, 0x1b4, 0x0, 0xda0a, 0x148, 0x10000, 0x10001}}}) 23:27:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x48000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 811.442666][ T6000] dlm: dev_write no op 34bde833 a95e29700710 23:27:53 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4) [ 811.584694][ T6182] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 811.650213][ T26] kauditd_printk_skb: 818 callbacks suppressed [ 811.650226][ T26] audit: type=1326 audit(1568071674.072:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:54 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:54 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:54 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34104870295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 811.682948][ T26] audit: type=1326 audit(1568071674.072:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4c000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 811.732888][ T6362] dlm: dev_write no op 34bde833 a95e29704810 [ 811.756419][ T26] audit: type=1326 audit(1568071674.072:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:54 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x5) 23:27:54 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34104c70295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 811.855836][ T6520] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:54 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34106070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 811.911408][ T26] audit: type=1326 audit(1568071674.082:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 811.944320][ T6610] dlm: dev_write no op 34bde833 a95e29704c10 23:27:54 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000280)={0x7, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x5}}}, 0x104) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) 23:27:54 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x6) 23:27:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x60000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 812.104131][ T26] audit: type=1326 audit(1568071674.082:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 812.104883][ T6818] dlm: dev_write no op 34bde833 a95e29706010 [ 812.215726][ T26] audit: type=1326 audit(1568071674.082:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 812.258907][ T6970] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 812.269222][ T26] audit: type=1326 audit(1568071674.082:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 812.309054][ T26] audit: type=1326 audit(1568071674.082:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:54 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:54 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34106870295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 812.349023][ T26] audit: type=1326 audit(1568071674.102:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 812.380224][ T26] audit: type=1326 audit(1568071674.102:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6183 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=336 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:54 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7) 23:27:54 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="280027bd7000fedbdf250d00000038000100080009008000000008000500040000000c0006006e6f6e6500000000080009001f000000080005000400000008000800f50c00006400030008000500e00000020800040007000000140002007465716c30000000000000000000000008000500ffffffff080008000000000008000500ac1e00010800010002000000080003000100000014000600fe800000000000000000000000000012080006001f00000008000400050000001400020008000e004e24000008000d00000000000c00010008000b00736970000c0002000800070000800000"], 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x244, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff31}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff1222}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4da0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xded}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000820}, 0x8d86be1d80371df) [ 812.452845][ T7205] dlm: dev_write no op 34bde833 a95e29706810 23:27:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x65580000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:54 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34106c70295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:55 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x800000000080003, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xba6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x85, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0186416, &(0x7f0000000040)={0xfffffffffffffffe, 0x200, 0x609d, 0xf5, 0xa, 0x1ff}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000000)={0xff, 0x5, 0x7, 0x3473ef24e744b3de, 0x4}) [ 812.633812][ T7419] dlm: dev_write no op 34bde833 a95e29706c10 [ 812.659048][ T7455] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:55 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34107470295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:55 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x8) 23:27:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x68000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 812.831584][ T7732] dlm: dev_write no op 34bde833 a95e29707410 [ 812.903219][ T7841] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:55 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:55 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34107a70295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:55 executing program 4: geteuid() seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) ptrace$getregs(0xc, 0x0, 0x51, &(0x7f0000000100)=""/173) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x947, 0x804) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000200)) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8920, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000031c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000003200)={0x16, 0x0, 0x40, 0x20, 0x88, r3, 0x3, [], r4, 0xffffffffffffffff, 0x4}, 0x3c) 23:27:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6c000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:55 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xa) [ 813.091218][ T8083] dlm: dev_write no op 34bde833 a95e29707a10 23:27:55 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd3410000a295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 813.167547][ T8127] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:27:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x74000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:55 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x1c9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000000000400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 813.335963][ T8461] dlm: dev_write no op 34bde833 a95e290a0010 23:27:55 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x48) 23:27:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0xff}, 0x1c) 23:27:56 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:56 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100025295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x7a000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4c) 23:27:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0}, 0xff}, 0x1c) 23:27:56 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x336c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$eventfd(r2, &(0x7f0000000100)=0x10000, 0x8) open(&(0x7f0000000140)='./file1\x00', 0xeb61d6f4bf77d6fb, 0x2) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000000)={0x1, 0x1, @raw_data=[0x5, 0x4, 0x9, 0x3f, 0x5, 0xddc, 0x4, 0x6f9, 0x1000, 0x0, 0x6, 0x0, 0x4, 0x4, 0x7a43, 0x3]}) [ 813.754944][ T9037] dlm: dev_write no op 34bde833 a95e29250010 23:27:56 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070425ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0}, 0xff}, 0x1c) 23:27:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x80060000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 813.926536][ T9318] dlm: dev_write no op 34bde833 a95e42700010 23:27:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x68) 23:27:56 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9020056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0}, 0xff}, 0x1c) [ 814.177439][ T9673] dlm: dev_write no op 34bde833 2a95e29700010 23:27:56 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$KDSKBLED(r0, 0x4b65, 0x101) 23:27:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x81000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:56 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9030056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x6c) [ 814.344524][ T9879] dlm: dev_write no op 34bde833 3a95e29700010 23:27:56 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9040056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x88a8ffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0}, 0xff}, 0x1c) 23:27:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21090}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x74) [ 814.537273][T10261] dlm: dev_write no op 34bde833 4a95e29700010 23:27:57 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9050056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0}, 0xff}, 0x1c) [ 814.746824][T10597] dlm: dev_write no op 34bde833 5a95e29700010 23:27:57 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x9effffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:57 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x800000000000, 0x0, 0x0, 0x4307dd47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000100)={'syz0', "431a7a91e5a353ef046a7f1c7a89af97dbedc5519208810a97f64eb3a89133f855783d8e246c1f3b345ec30b8933032bba05ae504b0de24ef7540e2c2a778f021502866fde8366c30aa09347d984ddebfd7efa077df956fe409f2fe9e8c7a980875161092117f5abfd28a475c5f99e22920c98a79c3ca9482992d00e7f8ae55aeb1d0efb0295ea19b9f2ceacf6289bcdf6f39ceb1fd8b6a44494c4268aeec67497a1294ae49504f3db99f66b284b3a0a7a8992902c917368a0d9145243ca1aa6d47d06ffd1769b59d067ebc6306baa1d2184dd3cd0bc87960e960730e3ea3ee0208ecf"}, 0xe7) 23:27:57 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9060056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0}, 0xff}, 0x1c) 23:27:57 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7a) [ 814.975472][T10813] dlm: dev_write no op 34bde833 6a95e29700010 23:27:57 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9070056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0}, 0xff}, 0x1c) [ 815.101478][T11076] dlm: dev_write no op 34bde833 7a95e29700010 23:27:57 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9480056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xdc150000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:57 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x300) [ 815.280750][T11290] dlm: dev_write no op 34bde833 48a95e29700010 23:27:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x0}, 0xff}, 0x1c) 23:27:58 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:58 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea94c0056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:58 executing program 4: r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x102, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=r2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000001c0)={0xe79, 0xcc13f1a6ac9653a7, 0x9, 0x4, 0x1, @discrete={0x2, 0x6}}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000180)=r2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=r2) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x1, 0xa000) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000200)={0x20, 0x1, 0x6, 0x2, 0x6}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=r2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x8582, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf0ffffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x500) 23:27:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x0}, 0xff}, 0x1c) [ 815.599411][T11656] validate_nla: 7 callbacks suppressed [ 815.599421][T11656] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 815.603382][T11659] dlm: dev_write no op 34bde833 4ca95e29700010 23:27:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf1ffffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xe3) 23:27:58 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9600056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x600) 23:27:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x0}, 0xff}, 0x1c) [ 815.854326][T12081] dlm: dev_write no op 34bde833 60a95e29700010 [ 815.874119][T12090] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:58 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9680056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 816.013992][T12409] dlm: dev_write no op 34bde833 68a95e29700010 23:27:58 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xffffa888}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:58 executing program 4: seccomp(0x1, 0x8ccc0dfde0786876, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1010000, 0x7fff, 0x163, 0x8}, {0x4, 0x744, 0x6aed, 0xffffffffffffffff}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:58 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea96c0056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x700) 23:27:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x0}, 0xff}, 0x1c) [ 816.217865][T12511] dlm: dev_write no op 34bde833 6ca95e29700010 [ 816.236394][T12515] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:58 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9740056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x0}, 0xff}, 0x1c) 23:27:58 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0x8d}, &(0x7f00000000c0)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="72617774e0befd00000000000000000000000000000000000000000000000000190000003f5780c9b51b7b701f7afe55ee9d7a509b0000ad9116adbbe6"], &(0x7f0000000540)=0x3d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x0, 0x1}}, 0x20) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x9) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f0000000680)={&(0x7f0000000d40)={0x17c, 0x12, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@nested={0x40, 0x8, [@generic="a98eab02d66ad112ab87640c0fce11490b733fdb989e4e495d6316e1e3dca713062fa6fe2619cfde6537195bc6313fa89be0ae3d50578e503978ad81"]}, @typed={0xc, 0x5f, @u64}, @typed={0x8, 0x3c, @u32=0xfffffffffffffffb}, @generic="1747ae2024d4ad005d6f0f74c66ef2c9fd5cd924d30b9baab20231805591f43be64c588c4fc210df1fefc31c5e6b59b54bad54489ba801afc350dd8406d5252476be2fa7b44a0163c807f0fa6d5dbe120efe3e5b76391108e497878ae09fdd054c16f68434fb6f74da1a1650b76fa8586e8d0c5d1056a727bd56a08d11b4fe5a7c6b3c10540b691a4176ebdb9c781fc67e305076883e33e9a75b2072c8f7c2c06509887d4c7cdd764710715d80c4a3", @nested={0x60, 0x46, [@typed={0x14, 0x34, @str='key_or_keyring:'}, @generic="130ba52c7e889753e7ee02e7daf6a4b2bf681f966264547c23c44e116b4865c90d6ee4190e485fdf18671206350ddd04c224b43c735fc76e19d7b34c1d", @generic="fcfd7e7231", @typed={0x4, 0x0, @binary}]}, @generic, @typed={0x4, 0x5c}]}, 0x17c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)=@keyring={'key_or_keyring:'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='keyring\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x57ce, 0x4) r5 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x8282) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) 23:27:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xa00) 23:27:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xfffff000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 816.453026][T12960] dlm: dev_write no op 34bde833 74a95e29700010 23:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x0}, 0xff}, 0x1c) [ 816.532966][T13071] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 816.659374][ T26] kauditd_printk_skb: 732 callbacks suppressed [ 816.659387][ T26] audit: type=1326 audit(1568071679.082:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12951 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 816.785440][ T26] audit: type=1326 audit(1568071679.132:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12951 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 816.823597][ T26] audit: type=1326 audit(1568071679.142:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12951 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:27:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xffffff7f}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:27:59 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea97a0056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x3f00) 23:27:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getpriority(0xfffffffffffffffe, r0) tgkill(r0, 0xffffffffffffffff, 0x36) 23:27:59 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x0}, 0xff}, 0x1c) [ 816.915972][ T26] audit: type=1326 audit(1568071679.342:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 816.959705][T13555] dlm: dev_write no op 34bde833 7aa95e29700010 [ 816.972107][T13567] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:59 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x0) 23:27:59 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000356cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 817.009868][ T26] audit: type=1326 audit(1568071679.382:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0x0}, 0xff}, 0x1c) 23:27:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4000) [ 817.117881][ T26] audit: type=1326 audit(1568071679.382:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xffffff9e}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 817.164973][T13964] dlm: dev_write no op 34bde833 300a95e29700010 [ 817.169619][ T26] audit: type=1326 audit(1568071679.382:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=336 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:27:59 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000556cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:59 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x440000, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000280)=0xbd) r3 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@polexpire={0x32f, 0x1b, 0x10, 0x70bd28, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, [], 0x21}, @in6=@mcast1, 0x4e21, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x0, 0x2f, r2, r3}, {0x4, 0x2, 0xf750, 0x100, 0x1000, 0xd14, 0x5, 0x2}, {0x6, 0x1, 0x80000000, 0x1f}, 0x1, 0x6e6bc0, 0x3, 0x1, 0x3}, 0x3}, [@algo_comp={0x64, 0x3, {{'deflate\x00'}, 0xe0, "20e9d22e4c679bc17fb999c27694abf01737489cdbf6136a26b1a52f"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$TUNSETOWNER(r0, 0x400454cc, r3) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x80000, 0x8, &(0x7f0000000040)) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/134, 0x86) [ 817.265656][ T26] audit: type=1326 audit(1568071679.382:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 817.321718][T14098] dlm: dev_write no op 34bde833 500a95e29700010 [ 817.348161][T14095] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:27:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4800) 23:27:59 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000656cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0x0}, 0xff}, 0x1c) [ 817.421807][ T26] audit: type=1326 audit(1568071679.382:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 817.531744][ T26] audit: type=1326 audit(1568071679.382:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 817.537114][T14342] dlm: dev_write no op 34bde833 600a95e29700010 23:28:00 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xfffffff0}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:00 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4c00) 23:28:00 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x94340, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000756cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0x0}, 0xff}, 0x1c) [ 817.794334][T14653] dlm: dev_write no op 34bde833 700a95e29700010 [ 817.812231][T14652] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9002056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:00 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x6800) 23:28:00 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x1, {0x0, 0x4}}, 0x20) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 817.975401][T15052] dlm: dev_write no op 34bde833 2000a95e29700010 23:28:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xfffffff1}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9003f56cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 818.174454][T15369] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 818.190050][T15379] dlm: dev_write no op 34bde833 3f00a95e29700010 23:28:00 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e], 0x0, 0x0}, 0xff}, 0x1c) 23:28:00 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x6c00) 23:28:00 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="307d32a704a66df055f7ac5c720af6e41832816b707bb029a3ff30636f15e34924acb61dd523e723828dce485b2d1850b1cbe68d1440470628232b09753915640f847a172ffc542d3ebcd884f2325c", 0x4f, 0x0) keyctl$get_keyring_id(0x0, r0, 0x6) 23:28:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9004856cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x68000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 818.387073][T15511] dlm: dev_write no op 34bde833 4800a95e29700010 [ 818.397171][T15509] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800], 0x0, 0x0}, 0xff}, 0x1c) 23:28:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9004c56cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:00 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7400) 23:28:01 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffa485, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x40030000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 818.604729][T15943] dlm: dev_write no op 34bde833 4c00a95e29700010 23:28:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9006056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 818.674647][T16075] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 818.777609][T16148] dlm: dev_write no op 34bde833 6000a95e29700010 23:28:01 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:01 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7a00) 23:28:01 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x7, 0x200000000, 0x800, 0x10}, {0x1, 0x0, 0x803}, {0x1, 0x32d, 0x7, 0x40}]}) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x40, 0x50800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r3, 0xeb, "6deae5c4acdec271a219b192a88209c0a851859afb1c26f1c60a3173545ab70a5ea022fe9461e63ee1a7d99d2d5eba9a3073930880fe8696fd2e865819689f8bf5511a2b788376098625f5b953f32d226d535c2f852ae6620e52c33bfd2d16985bf6b17d726a5466d0b6fc3ca9d79d5a0e01c59e60e1366bff15cb78238c63b53abd08dfa2369ada072abf70bd3f0440286872adecd74ed02d084a57d99a75b7f0ae9ca8764f215755a893dfadb80b86ba289c5ba38921ca3b71b7b6c6be5ba16a9e0fe14ba33d9fb5b9e61846ad6f1afd0440e43dffa1c3b36d186b26ca22b72153c099ad477d923707ed"}, &(0x7f0000000040)=0xf3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23:28:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9006856cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf0ffffffffffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 818.971987][T16254] dlm: dev_write no op 34bde833 6800a95e29700010 23:28:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9006c56cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:01 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x8, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$RTC_UIE_ON(r1, 0x7003) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '@'}, {0x20, '\xaa!\x81md5summd5sum%}#selinux{&},'}, {0x20, 'user\xf5mime_type#&posix_acl_accessprocself'}], 0xa, "9f8e3cd56c771dde1763f7ee95da7c2158061e1f6adf46d71b8578652b71e5a0cd069ddf99b1cd022bbbd943df4751085c8cca9a6cfad9927a593ba879717f86c0f371a574004bbfdf6babace9836525595dd957050cf320020926d7bf11d4b795facdca931964906483bf04e1187893988699976863cef3"}, 0xcc) 23:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e23], 0x0, 0x0}, 0xff}, 0x1c) 23:28:01 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xff00) 23:28:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x100000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 819.174444][T16676] dlm: dev_write no op 34bde833 6c00a95e29700010 23:28:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9007456cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 819.333449][T17065] dlm: dev_write no op 34bde833 7400a95e29700010 23:28:01 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800], 0x0, 0x0}, 0xff}, 0x1c) 23:28:01 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x1000000) 23:28:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x200000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:01 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="3b24e5510fc329cecf18ee4fafcad6df", 0x10) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000100)="6d4350e22fb91a969f58ed7ba253c1463fbc159b984f6400e289948f0e69928889339225cc300c0f430c610e9ccc2794d655e3e002835bdb3d908162aefa436f8c993db849e788aa8dd32762782d727c4e7f26a0abbe4d858bc9871b6c438ac8a6f973816a8275f5bd9c3714610b8751e113e1051901a887f107e4524ee9c94146431d9966f1ec3e614af831f55a560e535e38956dc4a1739e94d86a075c923639c93c0facbda7ced3", &(0x7f00000001c0)="e2dc44c79f826ab5f96a4e07b5d52f1db7a97f45421bafc217150c968b61962aef521b0dce9f7afd854abdb6c7fdcb407636bf4c3542716bb83d06105ee685d394e457a522718049f4b61ca059415ace3593e112a9af65021f0faf6a31a352ab236d9111ba4644a2412313e04f918973dfa182ddaea729a55e78de695140308aaf7397e4f6cbfc0a22fc0b0f33232a337db85aff09c37d12db5eeab9f93335ab0341bbd5aa84ecf3a3a084ae1c28f67f6176a8455d8828561fc0b00efd495a061d732299689e065780da6e1ac5d1a989cf2c40dc7c87a2816439fe1f85f9a99d"}, 0x20) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9007a56cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 819.565671][T17145] dlm: dev_write no op 34bde833 7a00a95e29700010 23:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:02 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000256cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x300000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x2000000) 23:28:02 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x411101, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) seccomp(0x0, 0x4e7b0ff533b128e9, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xffffffffffffffc1, 0x8, 0x7f}, {0x7fffffff, 0x81, 0x5, 0x7}, {0x101, 0x5, 0xe91, 0x5}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) [ 819.809393][T17735] dlm: dev_write no op 34bde833 200a95e29700010 23:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400], 0x0, 0x0}, 0xff}, 0x1c) 23:28:02 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000356cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:02 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x3000000) 23:28:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x400000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:02 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8402, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0445611, &(0x7f0000000040)={0x7, 0x1, 0x4, 0x200000, {0x0, 0x7530}, {0x4, 0x18, 0x0, 0x5, 0x9, 0x2, "024f23e3"}, 0x59, 0x1, @offset=0x6, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) 23:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00], 0x0, 0x0}, 0xff}, 0x1c) [ 820.149569][T18157] dlm: dev_write no op 34bde833 300a95e29700010 [ 820.158856][T18160] QAT: Invalid ioctl 23:28:02 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000456cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:02 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x2, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4000000) 23:28:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x500000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 820.314585][T18589] dlm: dev_write no op 34bde833 400a95e29700010 23:28:02 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000556cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:02 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 820.499980][T18799] dlm: dev_write no op 34bde833 500a95e29700010 23:28:03 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x5000000) 23:28:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x600000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000656cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000756cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 820.711209][T18960] validate_nla: 6 callbacks suppressed [ 820.711217][T18960] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 820.734851][T18968] dlm: dev_write no op 34bde833 600a95e29700010 23:28:03 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) io_setup(0x1f, &(0x7f0000000140)=0x0) io_pgetevents(r2, 0x2, 0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={0x81}, 0x8}) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100), 0x4) 23:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x6000000) 23:28:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x700000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 820.903676][T19332] dlm: dev_write no op 34bde833 700a95e29700010 23:28:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9004856cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9004c56cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 821.067952][T19484] dlm: dev_write no op 34bde833 4800a95e29700010 [ 821.080003][T19480] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 821.214238][T19739] dlm: dev_write no op 34bde833 4c00a95e29700010 23:28:03 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7000000) 23:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:03 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x800000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9006056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 821.397816][T19814] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x8000000) 23:28:03 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket(0x11, 0x4, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) r1 = open(&(0x7f0000000280)='./file0/file0\x00', 0x400400, 0x1) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000200)={0xfffffffffffffc01, 0x79, 0x8, 0x2, 0x9}) r2 = dup(r0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x1, 0x5, 0x998}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20806}, 0x0, 0x2, 0xffffffffffffffff, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000100)=0x4) [ 821.448850][T20064] dlm: dev_write no op 34bde833 6000a95e29700010 23:28:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x900000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:04 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9006856cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 821.657410][T20308] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xa000000) [ 821.697702][T20391] dlm: dev_write no op 34bde833 6800a95e29700010 [ 821.821722][ T26] kauditd_printk_skb: 724 callbacks suppressed [ 821.821733][ T26] audit: type=1326 audit(1568071684.242:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20516 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 821.941386][ T26] audit: type=1326 audit(1568071684.302:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20516 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:04 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:04 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9006c56cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xa00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x3f000000) [ 821.983632][ T26] audit: type=1326 audit(1568071684.302:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20516 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 822.040725][T20696] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 822.041036][T20693] dlm: dev_write no op 34bde833 6c00a95e29700010 [ 822.068522][ T26] audit: type=1326 audit(1568071684.482:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20697 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:04 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9007456cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0x0}, 0xff}, 0x1c) [ 822.161348][ T26] audit: type=1326 audit(1568071684.482:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20697 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 822.220989][ T26] audit: type=1326 audit(1568071684.532:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20697 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x40000000) 23:28:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xb00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 822.342829][ T26] audit: type=1326 audit(1568071684.532:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20697 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=336 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 822.343759][T21059] dlm: dev_write no op 34bde833 7400a95e29700010 [ 822.414896][T21108] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0x0}, 0xff}, 0x1c) [ 822.443246][ T26] audit: type=1326 audit(1568071684.532:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20697 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x48000000) 23:28:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9007a56cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 822.577900][ T26] audit: type=1326 audit(1568071684.542:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20697 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 822.702451][T21410] dlm: dev_write no op 34bde833 7a00a95e29700010 [ 822.713901][ T26] audit: type=1326 audit(1568071684.542:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20697 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:05 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xc00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb020000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4c000000) [ 822.914840][T21537] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 822.946789][T21553] dlm: dev_write no op 34bde833 a95e29700010 23:28:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb030000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x68000000) [ 823.087142][T21808] dlm: dev_write no op 34bde833 a95e29700010 23:28:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xe00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb040000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e0000], 0x0, 0x0}, 0xff}, 0x1c) [ 823.254423][T21960] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 823.318896][T21999] dlm: dev_write no op 34bde833 a95e29700010 23:28:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x6c000000) 23:28:05 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb050000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000], 0x0, 0x0}, 0xff}, 0x1c) [ 823.565341][T22274] dlm: dev_write no op 34bde833 a95e29700010 [ 823.574175][T22287] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:06 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x74000000) 23:28:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb060000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1000000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000], 0x0, 0x0}, 0xff}, 0x1c) [ 823.835760][T22615] dlm: dev_write no op 34bde833 a95e29700010 [ 823.852510][T22650] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1100000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb070000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:06 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7a000000) 23:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000], 0x0, 0x0}, 0xff}, 0x1c) [ 824.083093][T22923] dlm: dev_write no op 34bde833 a95e29700010 23:28:06 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1200000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:06 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xfeffffff) 23:28:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb480000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000], 0x0, 0x0}, 0xff}, 0x1c) [ 824.281853][T23133] dlm: dev_write no op 34bde833 a95e29700010 23:28:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb4c0000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:06 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xff000000) 23:28:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1300000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 824.540683][T23382] dlm: dev_write no op 34bde833 a95e29700010 23:28:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb600000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:07 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xffffff7f) 23:28:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x1400000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 824.712122][T23641] dlm: dev_write no op 34bde833 a95e29700010 23:28:07 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb680000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb6c0000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 824.911083][T23829] dlm: dev_write no op 34bde833 a95e29700010 23:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x2000000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:07 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xfffffffe) [ 825.080744][T23988] dlm: dev_write no op 34bde833 a95e29700010 23:28:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb740000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x3f00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:07 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x1000000000000) [ 825.267177][T24300] dlm: dev_write no op 34bde833 a95e29700010 23:28:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb7a0000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4000000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:07 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:07 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x100000000000000) 23:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 825.542294][T24624] dlm: dev_write no op 34bde833 a95e29700010 23:28:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000300ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4800000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:08 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x200000000000000) [ 825.688683][T24830] dlm: dev_write no op 34bde833 a95e29700010 23:28:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000500ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 825.783473][T24860] validate_nla: 7 callbacks suppressed [ 825.795307][T24860] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 825.832689][T24937] dlm: dev_write no op 34bde833 a95e29700010 23:28:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000600ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x4c00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:08 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x300000000000000) [ 826.052803][T25194] dlm: dev_write no op 34bde833 a95e29700010 [ 826.084042][T25248] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:08 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000700ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6000000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 826.311881][T25521] dlm: dev_write no op 34bde833 a95e29700010 23:28:08 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x400000000000000) 23:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 826.367470][T25564] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:08 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb002000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:09 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x500000000000000) 23:28:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6558000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 826.590034][T25874] dlm: dev_write no op 34bde833 a95e29700010 [ 826.709706][T25942] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:09 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb003f00ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6800000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 826.862932][T26174] dlm: dev_write no op 34bde833 a95e29700010 [ 826.985337][T26250] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:09 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:09 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x600000000000000) 23:28:09 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb004800ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:09 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb004c00ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 827.103250][ T26] kauditd_printk_skb: 374 callbacks suppressed [ 827.103264][ T26] audit: type=1326 audit(1568071689.532:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 827.110826][T26379] dlm: dev_write no op 34bde833 a95e29700010 23:28:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x6c00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:09 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x700000000000000) 23:28:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 827.275566][T26595] dlm: dev_write no op 34bde833 a95e29700010 [ 827.287326][ T26] audit: type=1326 audit(1568071689.532:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 827.292062][T26611] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:09 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb006000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 827.423665][ T26] audit: type=1326 audit(1568071689.532:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x7400000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:09 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x800000000000000) [ 827.500918][T26870] dlm: dev_write no op 34bde833 a95e29700010 [ 827.512267][ T26] audit: type=1326 audit(1568071689.582:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 827.628054][ T26] audit: type=1326 audit(1568071689.582:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=336 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 827.655200][T26928] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 827.748052][ T26] audit: type=1326 audit(1568071689.582:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 827.775824][ T26] audit: type=1326 audit(1568071689.582:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 827.889740][ T26] audit: type=1326 audit(1568071689.582:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:10 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb006800ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:10 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xa00000000000000) 23:28:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x7a00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:10 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x3ff, 0x100000) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x402, 0x0) fcntl$getflags(r0, 0x401) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f352049607f1d55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket(0x18, 0x0, 0x0) getpeername$packet(r4, 0x0, &(0x7f00000002c0)) r5 = dup3(r3, r4, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x420180) r7 = socket(0x18, 0x0, 0x0) getpeername$packet(r7, 0x0, &(0x7f00000002c0)) sendto(r7, &(0x7f0000000300)="e0fb8b3fd72a24cc8a985e8af40b", 0xe, 0x20000000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6(0xa, 0x400000000001, 0x0) close(r8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x200004) sendfile(r8, r9, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0106434, &(0x7f0000000340)={0x20, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40086439, &(0x7f0000000380)={0xe482, r10}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r12, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x88) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000100)={r12, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000040)=0x84) [ 827.933587][ T26] audit: type=1326 audit(1568071689.582:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 827.980648][T27238] dlm: dev_write no op 34bde833 a95e29700010 [ 827.987334][T27244] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb006c00ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 828.026762][ T26] audit: type=1326 audit(1568071689.582:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26373 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x8100000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 828.134750][T27525] dlm: dev_write no op 34bde833 a95e29700010 23:28:10 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x3f00000000000000) 23:28:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb007400ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 828.214381][T27558] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x88a8ffff00000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 828.362489][T27937] dlm: dev_write no op 34bde833 a95e29700010 [ 828.461394][T27971] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:10 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/145, 0x91}], 0x4) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/6) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000013c0)="f132577b1ce681d8f32bd7f5876361509fad015f7c4ebfe69f4a9c4a3aef2fdfd0fe31959af6097c90ff1ca9080b52c8bd00af8e06e2b6d2b56ff7ac29ce141d09c465b8ff22f5489d59d232762336be95a5db98d4f04a1c8662dc728a3270b948adb38a698ff1805c70656e57b16e42e1aa54b184f79b8913e1c9095b97b98056f5383719466708ae9e1130eca70f1bef99fb66d1f1327807e938f764d685e6a37eadb99d4dc4f0cc2ae74e4e8acee9b35d8389465bb1bed7dce33c61f4a275f8c92a71a4", 0xc5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x2, 0x70, 0x800, 0x2, 0x1, 0x9, 0x0, 0x7, 0x2000, 0x1, 0xff, 0x2, 0x100, 0x4, 0x7, 0xb1b, 0x1, 0xe0, 0x6, 0x6, 0x8001, 0x20, 0x100000000, 0x8000, 0x4, 0x1, 0x3, 0x9, 0x8, 0xff, 0xffffffffffffff7f, 0x5, 0xfd8c, 0x0, 0x7, 0x9, 0x7, 0x5, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000001300), 0x6}, 0x11012, 0x2, 0x64, 0x9, 0x7, 0x200, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'team0\x00'}}}, ["", "", ""]}, 0x2c}}, 0x40000) 23:28:10 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:10 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4000000000000000) 23:28:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb007a00ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x9effffff00000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 828.575385][T28080] dlm: dev_write no op 34bde833 a95e29700010 23:28:11 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000200ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:11 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x50) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000000)={0x4, 0x20363059, 0x4, 0x1, 0x3, @stepwise={{0x6ef2, 0x1000}, {0x7ff, 0x7c00}, {0x815, 0x200}}}) 23:28:11 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4800000000000000) [ 828.769751][T28413] dlm: dev_write no op 34bde833 a95e29700010 23:28:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xdc15000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:11 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000300ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:11 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x4c00000000000000) [ 828.989183][T28755] dlm: dev_write no op 34bde833 a95e29700010 23:28:11 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf0ffffff00000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:11 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000400ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:11 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="b7c4145039caa7bd5faf97d16cd4f594fa15db129e770a887b0f07f67863f6ed23b06416dd5da14543e33503e0423c4649744ed941cf43c4bf1a3f25a799c15144bb78936cc218d5293b006eb0d64294a80af10bb43e29a3c9ca6e0909b016d3cb9b3879d9cfd6066d352faa7c3a07163f52691788b9227dc7cfcb0b7ca029f64cfc07cbe029dec0f3471cfde1c7c6b876bcd32ea040af", 0x97}, {&(0x7f0000000380)="df", 0x1}, {&(0x7f00000003c0)="d67ba61e34a1f6a6c057045dece6e965461c700739bfb82528d8ebc4da290396b16032fde38ada43cdd9cd5843a625c0a0c896019ce1ebc13fd21c921de72b8a31d42e86a605b97ff9494aa661037ccf9f4c7c5fbcfab4cb9039763f785c2793affaae03bd45f9ff16f8181ab3b2a5840651fc693dcba8050895168411f37b6b5c44f232d788fbc4a9bd2e62f1e95cd8717ae3bfab192051b4953c98b7269969864e526116b0883e5767b0ad04dfd521714d913647760126467285d9b1b9053b9ab96e8d6c0ea24d40f5012bf1dc696d85707419a53b1c37e92271a69d0e7c5ab07689c9410ecd422eb53aba54b5088084e9b22a", 0xf4}, {&(0x7f00000004c0)="27830b294bfe36e832edee7dc8435f1f6739dfae90d22e0685b9e39edbfd38941c56c3cc1654354f6d88246ab41e999204ff53e76b15e172ec369aef4d2ec8a6321f2c2d5b492c72f2f7d141a8b34efda43e6ab570dfbb6c3ee18fe9a51769022b47809db2e153a3ed73f505caa1fe3e81ddb26569", 0x75}, {&(0x7f0000000540)="7f3b1e972c82e946619ec9285754c9c5a0500abdeffeffdf40e0515940dce0812f8852a9daa6b8f89cf3ea70a6dc0dc9dfa7e933bb5a050402ff1e11e5f760a9d9fc27c3699a62bc3f5d727d08dca3c96c", 0x51}], 0x5) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) seccomp(0x0, 0x0, &(0x7f0000000100)={0xa, &(0x7f0000000000)=[{0x3, 0x7, 0xe6e6, 0x7ff}, {0x5, 0x7, 0x1}, {0x4, 0x81, 0x0, 0x1}, {0x8, 0xffffffffffff0001, 0x8, 0x2}, {0x3f, 0x1, 0xce, 0x3}, {0x1, 0x0, 0x4, 0x280399e5}, {0x5, 0x1, 0x7, 0x81}, {0x20, 0x7, 0x20, 0x2}, {0x5, 0x4, 0x0, 0x4}, {0x0, 0x6, 0xffffffff, 0x6}]}) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x400, 0x10000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r3 = getpid() getpriority(0xfffffffffffffffe, r3) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x9, 0x40, 0x3, 0xffffffffffffffcb, 0x0, 0x101, 0x4, 0x4, 0x10001, 0xffff, 0x4958, 0xffffffffffff6edf, 0x8001, 0x0, 0xffffffffffff0001, 0x8000, 0x6, 0x101, 0x1f, 0xd5, 0x0, 0x4, 0x7, 0x10000, 0x5304, 0x1ff, 0x4, 0x80, 0x148c, 0x3ff, 0x40, 0x0, 0xff, 0x0, 0x8, 0x3, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000600), 0x11}, 0x100, 0x10000, 0x3ff, 0x6, 0x3b, 0x7ff, 0x9}, r3, 0xe, r4, 0x9) ioctl$NBD_DO_IT(r2, 0xab03) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) 23:28:11 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x6800000000000000) [ 829.335945][T29120] dlm: dev_write no op 34bde833 a95e29700010 23:28:11 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000500ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xf1ffffff00000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:11 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x6c00000000000000) 23:28:11 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0xdf2852fe6f771710) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) [ 829.519442][T29537] dlm: dev_write no op 34bde833 a95e29700010 23:28:12 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000600ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 829.704961][T29925] dlm: dev_write no op 34bde833 a95e29700010 23:28:12 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xffffff7f00000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:12 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7400000000000000) 23:28:12 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80280, 0x5a) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x9, 0x5, 0x80000000, 0x2, [], [], [], 0x5, 0x3f, 0x5, 0x3f, "0b612f0d5d1a7bed7b357836c11d8e99"}) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:12 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000700ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:12 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb004800ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 829.971177][T29965] dlm: dev_write no op 34bde833 a95e29700010 23:28:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xffffffff00000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0xff}, 0x1c) 23:28:12 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7a00000000000000) 23:28:12 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) [ 830.114224][T30348] dlm: dev_write no op 34bde833 a95e29700010 23:28:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0xfffffffffffff000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:12 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:12 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb004c00ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:12 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xfeffffff00000000) 23:28:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0}, 0xff}, 0x1c) 23:28:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:12 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7ff, 0x540002) getpeername$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x6, 0x4) seccomp(0x42f96d2ee1175013, 0x0, &(0x7f0000000080)={0x200000000000033d, &(0x7f0000000180)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 830.577088][T30904] dlm: dev_write no op 34bde833 a95e29700010 23:28:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0}, 0xff}, 0x1c) 23:28:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb006000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:13 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xff00000000000000) [ 830.754252][T31315] dlm: dev_write no op 34bde833 a95e29700010 23:28:13 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x80c, 0xffffffffffffffff) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) recvfrom$rxrpc(r1, &(0x7f0000000100)=""/60, 0x3c, 0x20, &(0x7f0000000140)=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:13 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb006800ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0}, 0xff}, 0x1c) 23:28:13 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xffffff7f00000000) 23:28:13 executing program 4: seccomp(0x1, 0x1, &(0x7f0000000080)={0x200000000000006d, &(0x7f00000000c0)}) [ 831.182151][T31735] validate_nla: 9 callbacks suppressed [ 831.182160][T31735] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 831.200015][T31900] dlm: dev_write no op 34bde833 a95e29700010 23:28:13 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) r2 = dup2(r0, r1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) 23:28:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0}, 0xff}, 0x1c) 23:28:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb006c00ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:13 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xffffffff00000000) 23:28:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 831.379332][T32060] dlm: dev_write no op 34bde833 a95e29700010 23:28:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb007400ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 831.493025][T32325] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 831.566365][T32387] dlm: dev_write no op 34bde833 a95e29700010 23:28:14 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:14 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0}, 0xff}, 0x1c) 23:28:14 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0xffffffffffffffff) 23:28:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb007a00ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 831.753307][T32477] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 831.765445][T32480] dlm: dev_write no op 34bde833 a95e29700010 23:28:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0}, 0xff}, 0x1c) 23:28:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000003ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:14 executing program 5: seccomp(0x2, 0x1, &(0x7f0000000040)) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 831.938662][ T418] dlm: dev_write no op 34bde833 a95e29700010 23:28:14 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a45352, &(0x7f0000000100)={{0x8, 0x1}, 'port1\x00', 0x5a, 0x100248, 0x8001, 0x40, 0x9, 0x800, 0x2, 0x0, 0x8, 0x808000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000005ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 832.020734][ T482] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 832.145209][ T606] dlm: dev_write no op 34bde833 a95e29700010 [ 832.192697][ T26] kauditd_printk_skb: 741 callbacks suppressed [ 832.192710][ T26] audit: type=1326 audit(1568071694.622:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:14 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0}, 0xff}, 0x1c) 23:28:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000006ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:14 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket(0x18, 0x0, 0x0) shmget(0x3, 0x2000, 0xdf784a90cfcf8e32, &(0x7f0000ffd000/0x2000)=nil) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000000100)=""/175) [ 832.351747][ T26] audit: type=1326 audit(1568071694.622:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 832.375412][ T879] dlm: dev_write no op 34bde833 a95e29700010 [ 832.384303][ T847] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:14 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x11d500) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x2, 0x5000}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x0}, 0xff}, 0x1c) 23:28:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000007ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 832.467707][ T26] audit: type=1326 audit(1568071694.622:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 832.522575][ T26] audit: type=1326 audit(1568071694.942:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:28:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 832.588344][ T1074] dlm: dev_write no op 34bde833 a95e29700010 [ 832.602504][ T26] audit: type=1326 audit(1568071694.942:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:28:15 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000020ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x0}, 0xff}, 0x1c) [ 832.705132][ T26] audit: type=1326 audit(1568071694.942:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 832.734848][ T1383] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 832.745213][ T26] audit: type=1326 audit(1568071694.952:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 832.800207][ T1422] dlm: dev_write no op 34bde833 a95e29700010 [ 832.833900][ T26] audit: type=1326 audit(1568071694.952:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 832.917813][ T26] audit: type=1326 audit(1568071694.952:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 832.941372][ T26] audit: type=1326 audit(1568071694.952:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=966 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:28:15 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:15 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8001, 0x1, 0x8, 0x7, 0x3, 0x10001, 0x4, 0x3ff, r3}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:15 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb00003fad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x0}, 0xff}, 0x1c) 23:28:15 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) [ 833.065385][ T1611] dlm: dev_write no op 34bde833 a95e29700010 [ 833.077616][ T1609] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:15 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000048ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x0}, 0xff}, 0x1c) [ 833.177505][ T1817] dlm: dev_write no op 34bde833 a95e29700010 23:28:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:15 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb00004cad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:15 executing program 5: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0xfffffffffffffff9, @local, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="1681d35d2f16299de9bdb40e7ae6c981361944f7d61a593a2a66d30008ef9f1e3b77e29314e8b8a5ddeff21bd37fa3d5d0d911a831a25bbb60a3a696617e3afb5c43934087169f4285448630b7027c5b946756b888444d409362e7ddad612f77db9e886e2e3509df0ba70fd4e217fe435d99f1125dea1019", 0x78}, {&(0x7f0000000180)="b2d25b3f3c909466ebf843634950be873ed12b5d6faf068ce23320c42789164a2c6dace1a281a87d0e552f3eb0fec29866e9a3a2fe0ba39cce38a9d49aac97911d06908637c36af7461aabb572a7a71028019049", 0x54}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1c, 0x28040005}, 0x40000410) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 833.321795][ T2044] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 833.414221][ T2053] dlm: dev_write no op 34bde833 a95e29700010 23:28:16 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x0}, 0xff}, 0x1c) 23:28:16 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000100)) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000060ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:16 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) socket$inet6(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$UI_END_FF_UPLOAD(r0, 0x406055c9, &(0x7f00000000c0)={0x9, 0x5, {0x51, 0x9, 0xfffffffffffffff7, {0x6, 0x8}, {0x9, 0xfffffffffffffff7}, @cond=[{0x4, 0xffffffffffff8001, 0x200, 0x9, 0x200, 0x1ff}, {0xffffffff00000000, 0x0, 0x5, 0x480000, 0x3, 0x7}]}, {0x55, 0x9, 0xfffffffffffffe01, {0xfffffffffffffffe, 0x3}, {0x1, 0x6}, @rumble={0x6, 0x101}}}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0)={0x9}, 0x4) rt_sigpending(&(0x7f0000000200), 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x9}, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000040)={0x9, 0x97, 0x9}) 23:28:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000068ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 833.639902][ T2261] dlm: dev_write no op 34bde833 a95e29700010 [ 833.668988][ T2263] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x0}, 0xff}, 0x1c) 23:28:16 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x7d59a33555fa661f, 0x9}) 23:28:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 833.799738][ T2628] dlm: dev_write no op 34bde833 a95e29700010 23:28:16 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80000000, 0x100) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/156}) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb00006cad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 833.915916][ T2757] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 834.007966][ T2861] dlm: dev_write no op 34bde833 a95e29700010 23:28:16 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x0}, 0xff}, 0x1c) 23:28:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000074ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:16 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:16 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) getpid() r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfcd, 0x400) r1 = getpid() getpriority(0xfffffffffffffffe, r1) perf_event_open(0x0, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket(0x18, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) fcntl$getown(r2, 0x9) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x198b23399f975fb0, 0x50, r0, 0x10000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000100)={r6, 0x5a9f11bd, 0x74, "6be455a08e8d6ccf803a6984b7f5f39ba7e6b39131c7193185fabb9e8412869baab3726fbd8d4983c64a8190fcdc3476c79b606e853b8211b14486dd93a7c30e0dadc4319c9318ca72d594846a1c0885f91097f0a20b927530449b972bbeb86f15ab215a48e21056e17b294b0a8d979a150a96a3"}, 0x7c) socket$inet6(0xa, 0x1, 0x0) 23:28:16 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x101, 0x40084) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x10001, 0x566d35e7dc179630, 0xc0, 0x903, 0x2, @discrete={0x6, 0x5}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000100)={0x7, 0xffffffffffffff02}) [ 834.277863][ T3134] dlm: dev_write no op 34bde833 a95e29700010 23:28:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb00007aad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0x0}, 0xff}, 0x1c) [ 834.447610][ T3469] dlm: dev_write no op 34bde833 a95e29700010 23:28:16 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x2, @time={0x77359400}, 0x4, {0x1, 0x1}, 0xffff, 0x0, 0x76f}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, 0xfffffffffffffffe, 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x2000}, @fda={0x66646185, 0x8, 0x1, 0x22}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x3a, 0x0, &(0x7f00000002c0)="811be10a459a6bbb2b2b4a74406555c225a205e411db95114f99620be50dc38c6bcb400b6c417c2f79c1250e9753576de5fd12140ea411dda7de"}) 23:28:16 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb0000d7a188f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 834.711804][ T3831] dlm: dev_write no op 34bde833 a95e29700010 23:28:17 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0x0}, 0xff}, 0x1c) 23:28:17 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20202, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), 0x4) 23:28:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x11}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:17 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb0000ffac88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x1) [ 834.853393][ T3937] dlm: dev_write no op 34bde833 a95e29700010 23:28:17 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000002ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x12}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0x0}, 0xff}, 0x1c) 23:28:17 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) setreuid(r1, r2) socket$inet6(0xa, 0x1, 0x0) [ 835.086542][ T4409] dlm: dev_write no op 34bde833 a95e29700010 23:28:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x13}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:17 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:17 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000003ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x6, 0x6, 0x10001, 0x0, 0x1000, 0xb01a2c1dcdaf5a49, 0x6, 0x14, 0x25, 0x1000, 0x8, 0x1, 0x7, 0xa, 0x9, 0x100000000, 0x7, 0x80, 0xff, 0x4, 0x4, 0x80, 0x3a5, 0x0, 0x3, 0x40, 0x101, 0xc9, 0x7, 0x1, 0x8001, 0x7fff, 0x4, 0xffffffffffff0a6f, 0x3, 0x0, 0x5, 0x5, @perf_bp={&(0x7f0000000000), 0x2}, 0x12, 0x3, 0x20, 0x8, 0x0, 0x6, 0x8}, r0, 0xf, r1, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:17 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 23:28:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x14}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 835.388396][ T4831] dlm: dev_write no op 34bde833 a95e29700010 23:28:17 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000004ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:18 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x231e, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) socket$inet6(0xa, 0x1, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000000)="669dae8246e312ca38ed0ef14be9fd53bfc61dbf19f20c9429532352e6e43e38d0296963c10d3efbab5dafab20b9a199a7d2690450df39", 0x37) 23:28:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e], 0x0, 0x0}, 0xff}, 0x1c) [ 835.573617][ T5117] dlm: dev_write no op 34bde833 a95e29700010 23:28:18 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000005ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:18 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x48}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 835.735049][ T5438] dlm: dev_write no op 34bde833 a95e29700010 23:28:18 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:18 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = getpid() getpriority(0xfffffffffffffffe, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=""/30, 0xa}) keyctl$set_reqkey_keyring(0xe, 0x5) 23:28:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800], 0x0, 0x0}, 0xff}, 0x1c) 23:28:18 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000006ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:18 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4280, 0x0) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @empty}}, 0x8, 0x4, 0x4, 0x5, 0x6}, &(0x7f0000000200)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x81, &(0x7f0000000280)={0x9}, 0x8) 23:28:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4c}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 836.113510][ T5631] dlm: dev_write no op 34bde833 a95e29700010 23:28:18 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000007ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x60}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:18 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x2400) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 23:28:18 executing program 4: ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x200) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x3c5a80) ioctl$TCXONC(r1, 0x540a, 0x8) [ 836.300977][ T6023] dlm: dev_write no op 34bde833 a95e29700010 [ 836.352078][ T6029] validate_nla: 8 callbacks suppressed [ 836.352086][ T6029] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:18 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000048ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 836.466969][ T6356] dlm: dev_write no op 34bde833 a95e29700010 23:28:19 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e23], 0x0, 0x0}, 0xff}, 0x1c) 23:28:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000009, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x5870cc66545fa305) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000100)='!-\x00', 0x0) 23:28:19 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000180)=[0x0, 0x1], 0x2) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x19) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000280)=0xffffffffffffff71) r5 = getuid() openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x4000, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="240100001b00100028bd7000fddbdf0100000002000000000000000000000000ff0100000000000000000000000000014e2100004e2200020a0020002f000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="040004000000000002000000000000001d0000000000000000010000000000000010000000000000140d000000000000050000000000000002000000000000000600000000000000010000000000000000000080000000001f0000000000000001000000c06b6e0003010000000000000300000000000000640003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000020e9d22e4c679bc17fb999c27694abf01737489cdbf6136a26b1a52f"], 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4) r6 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0xffffffffffffffff, r5, r6}, 0xc) 23:28:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x68}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb00004cad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 836.753931][ T6452] dlm: dev_write no op 34bde833 a95e29700010 [ 836.764874][ T6453] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000060ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x201, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x1000) seccomp(0x1, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x80000000, 0x7, 0x7}, {0x50, 0x404, 0xac88}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000180)={0x7, 0x6d, 0x2}, 0x7) socket$inet6(0xa, 0x1, 0x0) 23:28:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800], 0x0, 0x0}, 0xff}, 0x1c) [ 836.898125][ T6745] dlm: dev_write no op 34bde833 a95e29700010 23:28:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6c}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000068ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:19 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100006}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r2, 0x400, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x78, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffff2b8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0x10c, &(0x7f0000000180)={&(0x7f0000000040)={0x30, r2, 0x2, 0x70bd29, 0x259fdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0xffffffffffffff06, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4020080}, 0x60055) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 837.157965][ T7079] dlm: dev_write no op 34bde833 a95e29700010 [ 837.174984][ T7078] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:19 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) fadvise64(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x0) 23:28:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb00006cad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:19 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$usb(&(0x7f00000011c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x4000) write$P9_RRENAME(r0, &(0x7f0000001200)={0x7, 0x15, 0x2}, 0x7) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f00000001c0)=""/4096, 0x1000) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f00000001c0)=""/4096, 0x1000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x8) write$binfmt_elf32(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca0000000038000000000000f7ffffffffffff1f0002000000000000080000000001000000000004000000ff000000000000010000000001000000310ff3eec1b0000c085355be8847c22e30f56282c62c95723f06dec34993388072d8cc6457e3"], 0x78) close(r3) uselib(&(0x7f0000000040)='./file0\x00') truncate(&(0x7f0000000180)='./file0\x00', 0x0) r4 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='%\x00', r2) keyctl$negate(0xd, r1, 0x4, r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x74}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 837.376230][ T7289] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 837.380157][ T7293] dlm: dev_write no op 34bde833 a95e29700010 [ 837.405947][ T26] kauditd_printk_skb: 837 callbacks suppressed 23:28:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400], 0x0, 0x0}, 0xff}, 0x1c) [ 837.405960][ T26] audit: type=1326 audit(1568071699.832:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7291 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 837.443817][ T7292] encrypted_key: insufficient parameters specified 23:28:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7a}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000074ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 837.478812][ T26] audit: type=1326 audit(1568071699.832:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 837.509386][ T7292] encrypted_key: insufficient parameters specified 23:28:20 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='vboxnet0', 0xfffffffffffffffb) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="bc0460b46f19a6b18d31c2c05c2b", 0xe, r0) [ 837.606019][ T7659] dlm: dev_write no op 34bde833 a95e29700010 [ 837.614779][ T7660] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 837.624273][ T26] audit: type=1326 audit(1568071699.832:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:28:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb00007aad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 837.768768][ T26] audit: type=1326 audit(1568071699.832:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 837.830838][ T8038] dlm: dev_write no op 34bde833 a95e29700010 [ 837.838055][ T26] audit: type=1326 audit(1568071699.872:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7291 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 837.869268][ T26] audit: type=1326 audit(1568071699.872:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7291 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 837.905599][ T26] audit: type=1326 audit(1568071699.872:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 837.932238][ T26] audit: type=1326 audit(1568071699.872:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 837.958555][ T26] audit: type=1326 audit(1568071699.872:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f62a29 code=0x7ffc0000 [ 837.985685][ T26] audit: type=1326 audit(1568071699.872:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62a29 code=0x7ffc0000 23:28:20 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x12, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf0}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a20affffffc087223ba7f400000000"], 0x40) 23:28:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000040)) 23:28:20 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7, 0x0) 23:28:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x300}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 838.096508][ T8133] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 838.123380][ T8141] dlm: dev_write no op 34bde833 a95e29700010 23:28:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a225ffffffc087223ba7f400000000"], 0x40) 23:28:20 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000400)={0x2, 0x4, 0x20, 0x9, 0x4}) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket(0x18, 0x0, 0x0) getpeername$packet(r4, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000440)={0x0, 0xe333, 0x30}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000004c0)={r5, 0x9, 0x30}, 0xc) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x54000880}, 0x128, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x20}}, ["", "", "", "", "", ""]}, 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000280)=0xbd) r8 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2f0300001b00100028bd7000fddbdf25fe80000000000000000000100000000d72e9e1000000000000000000000000014e2100004e2200020a0080002f000000f96a4ca8ca56ddfb5897af5afac2cf6e259a4f3641814f5fdf92fa36ac55a35e7741951dc4e35f1f12dab314e703a7c2b01167d2ff8878b30d7b80e74a7ee36b81659468e6e814b41c3ca5f0b3f8a0887b6287f71b38f105d5cabcebb50cba1f530a92e9f8d897ce4718246d1b5375e8848ef3bdc82dc730527f36a7f7c6ea08e84c7cd92779a708622c115abac5d0d61818af7d8268c336a90e85c51d1055", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0400000000000000020000000000000050f700000000000000010000000000000010000000000000140d000000000000050000000000000002000000000000000600000000000000010000000000000000000080000000001f0000000000000001000000c06b6e0003010300000000000300000000000000640003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000020e9d22e4c679bc17fb999c27694abf01737489cdbf6136a26b1a52f"], 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x4) r9 = getegid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x80, {0x20, 0x4, 0x3}, 0x20, r8, r9, 0x4d4, 0x8, 0x40, 0x2e52, 0x9, 0x3ff, 0x8, 0xff, 0x3, 0x800, 0x7fff, 0xff, 0x1ff, 0x4, 0x20}}, 0xa0) r10 = socket(0x1, 0x3, 0x2) getpeername$packet(r10, 0x0, &(0x7f00000002c0)) prctl$PR_CAPBSET_DROP(0x18, 0x17) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="99b65dc94711c58894c3810000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000040)=0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000100)={r11, 0x30, 0x3, [0x100000001, 0x7, 0x72d4707d]}, &(0x7f0000000140)=0xe) 23:28:20 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f01215a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 838.285550][ T8551] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 838.319378][ T8568] dlm: dev_write no op 34bde833 a95e29700010 23:28:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087423ba7f400000000"], 0x40) [ 838.534459][ T8769] dlm: dev_write no op 34bde833 a95e29700010 23:28:21 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x300, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x500}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:21 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x10000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0xa5, 0x8, 0x3ff, 0x5, 0x455, 0x3}) 23:28:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc0872242a7f400000000"], 0x40) 23:28:21 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x18, 0x0, 0x0) r2 = semget(0x2, 0x4, 0x4) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000040)=""/43) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) r3 = signalfd4(r1, &(0x7f0000000000)={0x401}, 0x8, 0x40000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0xffffffff, @rand_addr="0d4f593454eb53558d28c9f2c477546a", 0xb5a}, @in6={0xa, 0x4e20, 0x2, @loopback, 0x9}, @in6={0xa, 0x4e21, 0x3ff, @loopback, 0x57}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0xfff, @local, 0x9}, @in6={0xa, 0x4e20, 0x23e4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x7ff, @rand_addr="d5f0e0751c41eed61ef6201a75c9563a", 0x10001}, @in6={0xa, 0x4e22, 0x0, @rand_addr="082d3afcbb2677ad9aed12148b3a4529", 0x6}, @in={0x2, 0x4e20, @empty}], 0xe4) close(r4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000000c0)=0x0) r7 = getpid() getpriority(0xfffffffffffffffe, r7) r8 = socket(0x18, 0x0, 0x0) getpeername$packet(r8, 0x0, &(0x7f00000002c0)) getsockname(r8, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000240)=0x80) r9 = socket(0x18, 0x0, 0x0) getpeername$packet(r9, 0x0, &(0x7f00000002c0)) r10 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xad0, 0x800) r11 = dup3(r3, 0xffffffffffffffff, 0x1c0000) setsockopt$inet_sctp_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000180)={0x4, 0xffff, 0x100000001, 0x5, 0x8, 0x3, 0x4, 0x645, 0x2, 0x1, 0xa05}, 0xb) r12 = socket(0x18, 0x0, 0x0) getpeername$packet(r12, 0x0, &(0x7f00000002c0)) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r9, &(0x7f0000000140)={r10, r12, 0xbd27}) [ 838.675370][ T8774] dlm: dev_write no op 34bde833 a95e29700010 [ 838.692926][ T8780] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f402000000"], 0x40) 23:28:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:21 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xf4c, 0x101400) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000100)=""/125) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x600}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 838.886072][ T9152] dlm: dev_write no op 34bde833 a95e29700010 23:28:21 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xa3, "97341e90a8e68f7c888f461dde722ba80de39ff7c17f90f832b244ce701e8bc053eb0106e1d20f337e64d612df9cd8f8b797ab265eeb3dd1dfe5bc930c7bdf5b167459f0e1d776851d3e30c5e62162a81ba9b4e05df864a1168ba1c1608145c4383f35aebe88e8b870505483f25db5462763ceacfb24c7d4032aa11b99dfa8fe6d014e894f67d90a4ae776404c2a4aef652784589de6cbdd79926ba712e74dcc4cd1d5"}, &(0x7f0000000000)=0xab) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x30000, 0x5b7f8a39, 0xd, 0x3, 0x6, 0x5, 0x1, 0x3, r1}, 0x20) socket$inet6(0xa, 0x1, 0x0) 23:28:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f403000000"], 0x40) [ 838.963390][ T9257] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 839.040262][ T9409] dlm: dev_write no op 34bde833 a95e29700010 23:28:21 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x500, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:21 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xa40102, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth1_to_bond\x00', @local}) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000000)) 23:28:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f404000000"], 0x40) 23:28:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x680}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:21 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'syzkaller1\x00', 0x9}) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x400, 0x2b4, 0x1000000000000, 0xffff, 0x10000, 0x1, 0x4, 0x80000000]}) socket$inet6(0xa, 0x5, 0x0) 23:28:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f405000000"], 0x40) [ 839.284165][ T9625] dlm: dev_write no op 34bde833 a95e29700010 [ 839.306940][ T9627] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:21 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xd159f2d69f3c3d6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x9}, {0xa, 0x0, 0x0, @loopback}, r3}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x1, {0x4, 0x1, "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", 0x65, 0x6, 0x81, 0x800, 0x7, 0x5f8, 0x2}, r3}}, 0x128) ioctl$NBD_DO_IT(r0, 0xab03) write$P9_RWALK(r0, &(0x7f0000000000)={0x23, 0x6f, 0x2, {0x2, [{0x0, 0x1, 0x8}, {0x9a, 0x3, 0x8}]}}, 0x23) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000000c0)) r4 = socket(0x18, 0x0, 0x0) getpeername$packet(r4, 0x0, &(0x7f00000002c0)) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000080)=0xf5efd702455d6422) [ 839.455255][ T9918] dlm: dev_write no op 34bde833 a95e29700010 23:28:21 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x300000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="1a10ca89f1474eefe43f2105667a9a06aa45e738d89360cc39886de7cdea0b6dff2614286c287154f34fefe8bd51faebe7cc5cbcd8dbd74f4ca86f3074e1727324dde400"/78, @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r3, 0x9}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x700}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f406000000"], 0x40) [ 839.669504][T10343] dlm: dev_write no op 34bde833 a95e29700010 23:28:22 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x600, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:22 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='\xfc\xff\xff\xff\xff\xff\xffy\x9e\x05S\xffr\x00\x00\x00\x00J\xeb\x1b\xb5\xdf\xe2\x17$\xd7\xf0\x99\x81\xbdS\x83T6\a\x9a\xd8\xcb\xab\x0f0\xa5\xffA\x17{l\xb7\xd6~7\xc8E\x9c=%l\f\x1b\xa6\xd1\x1eA\n\x83\xaf\xa7\xad\x9d\xf9MA\xf8(d\xc5\xf2)\xf4\xa7\xa8\xee\xde\xbf\xff\xd9m\v%\'\x9f\xd1\xd0\'\xcc\t\xc5d\xc47|\xfc\xe7v\r\xf8\r\x9f\xe1Z7\xf86\xder`\x9f\xca:\xa21s\xa3\xbd\x9fKu\xcdF\xcd\x04\xd0\xd3]\xcd\xef\x9b\xf0E\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0xb, &(0x7f0000000000)='mime_type)\x00'}, 0x30) perf_event_open(0x0, r2, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:22 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x80008, 0x6) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="c215835ac582d2846901932eee8173a6", 0xffffffff, 0x0, 0x3, 0xc, 0x9, 0x5d39cec2}, 0x20) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 23:28:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f407000000"], 0x40) 23:28:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x900}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 839.898979][T10543] dlm: dev_write no op 34bde833 a95e29700010 23:28:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f448000000"], 0x40) 23:28:22 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3ff, 0x101, 0x400, 0x1, 0x401, 0x7}, &(0x7f0000000040)={0xad, 0x5, 0x10001, 0x81, 0x9, 0x3, 0x6, 0xffff}, &(0x7f0000000100)={0x7f, 0x80000000, 0x5, 0x8001, 0x1, 0x6, 0x2, 0x2}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={0x7c5}, 0x8}) 23:28:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:22 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x48a800, 0x0) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="c29c64ffadaefd1a1edcbb1dc5f428bd38c48b670ba5411b576266d46e8ea774dd2da0c2a48298317925c185c0819d69fb531db094894afa423d75232418d876e4db1834003769a8bcf6fd7c389d368e8e02d85c0f8a9db19d5d10c72cf69d47ebd3bd499943219826eee26a8a46f77907cd9035e381463bdd32147a08af7c330a0489adcaf3d3e5596d9b5491370dd68876b35590c9aa040006c78e5e8d3b6045b3b1a8058d13a0ecacb2d35b", 0xad, 0xffffffffffffffff) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x0, 0x0) [ 840.125431][T11025] dlm: dev_write no op 34bde833 a95e29700010 23:28:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:22 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x700, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f44c000000"], 0x40) 23:28:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:22 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) timer_create(0x6, &(0x7f0000000040)={0x0, 0x1b, 0x4, @thr={&(0x7f0000000100)="6a6071284c9b08ef350d65d47e9b9610f2a35c64d48952bca8318479531f6adb62cd7280f8b89801297fb7b93d87298c19224768a87045ebf3371705aeea0fed2606f2fc3e99dcb4becfb64f2476f09564f14af2", &(0x7f0000000240)="b03fd765958c0e72a43a0aaae9cdb57bd75aad67a1c0d10019760a9383cc8e7b258980522a418833ccca07e551d36147dafc6f71ce122924200488a2148ad66a5bd7fd0f941feb0f332ec23cffa4c0d92429824e2bf724956685f5c31c1b4cdde4444c92a50949a0a3697476aa4d716e9d2e52b4afdaa91d0ab3039dc2bd1274f87f770b117996bef722b8f78fade96233122753c813fc1b316fd96a9a6b23e5d1d8c88a6f158cc8"}}, &(0x7f0000000180)) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x8, "9cf54e2547519dbbdfef1b29bab94888f5a256e2e258b793d3b605c658e7b750", 0x2, 0x259ce693bfff6e14}) socket$inet6(0xa, 0x1, 0x0) 23:28:22 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:22 executing program 4: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x4040010, &(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) [ 840.492194][T11495] dlm: dev_write no op 34bde833 a95e29700010 23:28:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f460000000"], 0x40) 23:28:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e0000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:23 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = getpgid(0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 840.670891][T11845] dlm: dev_write no op 34bde833 a95e29700010 23:28:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x5, 0x1b, r2, 0x0) readv(r3, &(0x7f0000002880)=[{&(0x7f0000002700)=""/190, 0xbe}], 0x1) write$eventfd(r1, &(0x7f00000002c0), 0x8) 23:28:23 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1200, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f468000000"], 0x40) 23:28:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:23 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) socket$inet6(0xa, 0x1, 0x0) 23:28:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x100000001, 0x6000000, 0x1}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080), 0x10) [ 841.053902][T12335] dlm: dev_write no op 34bde833 a95e29700010 23:28:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f46c000000"], 0x40) 23:28:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:23 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xb2, 0x4, 0x1, 0x7}, {0xb4000, 0x4f, 0x40, 0x2}, {0x7fff, 0x86, 0x4, 0x5}]}) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 841.242712][T12763] dlm: dev_write no op 34bde833 a95e29700010 23:28:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f474000000"], 0x40) 23:28:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1100}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 841.435639][T13052] dlm: dev_write no op 34bde833 a95e29700010 [ 841.463523][T13089] validate_nla: 7 callbacks suppressed [ 841.463533][T13089] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 841.528282][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 841.534100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 841.539928][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 841.545686][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 841.551505][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 841.557255][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:28:24 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x3f00, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:24 executing program 5: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) sendmsg$alg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="ed6b9f36f3b8f0e5c9c3d1b005afc39735a22030c11d5932f6d16206886758a96416e5949379065dd794f02777cf29d268f2d15848b6cbc036c5ccb808ec54e70b88aae2b1dcf8fb63692037f81cf95caf1154d81af27dfe6373601fa77066508cd8c315714b2d16e32349a2c0606e91eac41c3eff1897051a8d242c72fc", 0x7e}, {&(0x7f0000000100)="36abb556abf92ea17da76e51125cb572c9f7fd625ae71bd67ff1a5bd5d2b47c027e845a0ebe90de8ff4a6ed714fc3631cb1a0bfd50ce66c0870968478069cfe35f340794ac4b25c2db2b3d848588bafba6dd6e719f6a0e938d647cb90b5cea68645d759cd231f132cba88f1dd51696e11b", 0x71}], 0x2, &(0x7f00000001c0)=[@iv={0xa4, 0x117, 0x2, 0x93, "575bb8e2c64165ac8dc8b8540989095cfc3628d3f348caed3d534fe781a6e57f69e9ae96feb5bdcc0173f21c43a17e597c5b656c81140456b73f37526331f8b374cfb55137b001bb89b3c9cc103b435ef44210019388f4ab845ac2f360460672c105fbe7a43647f2b57222b859f9ec6a7a1a83a7f251507bfbcdbbc560063a91f71fc7207c5f29073f1dc34d729998f2c2d7d1"}, @op={0x10, 0x117, 0x3, 0x1}], 0xb4, 0x48b1}, 0x10) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:24 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f47a000000"], 0x40) 23:28:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1200}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 841.768271][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 841.774277][T13232] dlm: dev_write no op 34bde833 a95e29700010 [ 841.784367][T13231] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) flistxattr(r0, &(0x7f0000000240)=""/86, 0x56) 23:28:24 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400030000"], 0x40) 23:28:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1300}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:24 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='p\x00', 0x2a0201, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = getpgrp(0x0) perf_event_open(0x0, r2, 0x7, 0xffffffffffffffff, 0xc) socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x18, 0x1, 0x1) [ 842.111680][T13556] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 842.118142][T13557] dlm: dev_write no op 34bde833 a95e29700010 23:28:24 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400050000"], 0x40) 23:28:24 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001840)={{0x80}, 'port0\xa5\xfe\x98W\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe5\x00\x05\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa09b10562508f6}) [ 842.234387][T13821] dlm: dev_write no op 34bde833 a95e29700010 23:28:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:24 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x2000)=nil) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1400}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:24 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400060000"], 0x40) 23:28:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 842.410443][T13878] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 842.447115][ T26] kauditd_printk_skb: 665 callbacks suppressed [ 842.447129][ T26] audit: type=1326 audit(1568071704.872:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 842.454672][ T26] audit: type=1326 audit(1568071704.882:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket(0x100000000000011, 0x3, 0x81) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000e27fa7232f6f131d0000400a"], 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x6, 0x8f8) wait4(0x0, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r1, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000300)) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) ftruncate(0xffffffffffffffff, 0x87ffd) [ 842.558295][T14133] dlm: dev_write no op 34bde833 a95e29700010 23:28:25 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x5) socket$inet6(0xa, 0x4, 0x11007) 23:28:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x15dc}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:25 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400070000"], 0x40) [ 842.667317][ T26] audit: type=1326 audit(1568071704.932:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 842.748058][T14272] dlm: dev_write no op 34bde833 a95e29700010 [ 842.764081][ T26] audit: type=1326 audit(1568071704.932:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 842.816244][ T26] audit: type=1326 audit(1568071704.932:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 842.884858][ T26] audit: type=1326 audit(1568071704.932:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 842.932227][T14508] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:25 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xff00, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:25 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400200000"], 0x40) 23:28:25 executing program 4: 23:28:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:25 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x2000000000000035, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffbfffc}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x1, 0x404003) [ 842.980087][ T26] audit: type=1326 audit(1568071704.932:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:25 executing program 4: [ 843.024964][T14517] dlm: dev_write no op 34bde833 a95e29700010 23:28:25 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f4003f0000"], 0x40) [ 843.123448][ T26] audit: type=1326 audit(1568071704.932:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=336 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:25 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) fcntl$setstatus(r0, 0x4, 0x400) socket$inet6(0xa, 0x1, 0x0) 23:28:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket(0x100000000000011, 0x3, 0x81) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000e27fa7232f6f131d0000400a"], 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r1, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) ftruncate(0xffffffffffffffff, 0x87ffd) 23:28:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:25 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400480000"], 0x40) [ 843.200056][T14827] dlm: dev_write no op 34bde833 a95e29700010 [ 843.318642][T14839] dlm: dev_write no op 34bde833 a95e29700010 [ 843.337735][ T26] audit: type=1326 audit(1568071704.932:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 843.362933][T14877] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 843.391824][ T26] audit: type=1326 audit(1568071704.932:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13877 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:26 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f4004c0000"], 0x40) 23:28:26 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x63b91d90ce52019, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'ifb0\x00', 0x81}) ioctl$TIOCEXCL(r1, 0x540c) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2, 0x0) 23:28:26 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r0}, {r1}, {r2, 0x204}], 0x3, 0x0, 0x0, 0x0) 23:28:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3f00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 843.637293][T15271] dlm: dev_write no op 34bde833 a95e29700010 [ 843.640555][T15272] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400600000"], 0x40) 23:28:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:26 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 23:28:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 843.821931][T15689] dlm: dev_write no op 34bde833 a95e29700010 [ 843.848266][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 843.854095][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:28:26 executing program 5: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x100000000, {{0xa, 0x4e22, 0x5, @mcast2, 0x6ac}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x10000, @rand_addr="088d135438ae4659ad86d38e62a9fe92", 0x1f}}, {{0xa, 0x4e20, 0x401, @local, 0xfffffffffffffcc6}}]}, 0x18c) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400680000"], 0x40) [ 843.901699][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 844.032048][T15872] dlm: dev_write no op 34bde833 a95e29700010 23:28:26 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x2000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f4006c0000"], 0x40) 23:28:26 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x0, {0xa, 0x4e24, 0x3, @local, 0x2}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000040)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) socket$inet6(0xa, 0x1, 0x0) [ 844.201511][T15755] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001840)={{0x80}, 'port0\xa5\xfe\x98W\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe5\x00\x05\x00', 0xffffffffffdfffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa09b10562508f6}) [ 844.242767][T16031] dlm: dev_write no op 34bde833 a95e29700010 23:28:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4800}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:26 executing program 4: 23:28:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400740000"], 0x40) [ 844.382785][T16243] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:26 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x4, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x159202) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) signalfd4(r1, &(0x7f0000000140)={0x7}, 0x8, 0x800) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1800) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000100)) 23:28:26 executing program 4: [ 844.527565][T16447] dlm: dev_write no op 34bde833 a95e29700010 23:28:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4c00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 844.735625][T16647] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:27 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x3000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:27 executing program 4: 23:28:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:27 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f4007a0000"], 0x40) 23:28:27 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x200) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x9d, "7950eba3eecc0e67c23680c9d44ccb8348bdcc7a09297537b5059d848c4cdab9cca9a69325f0f8128bd1ae273d683e496f890c3ae78ae2549b76f25235697ea1ae92b904cb4682c251917177416cf349a865be3340d4a511f721990504ad6ddc649d0038feb5c0596a2e91f76660fcf69fac1b8fbd9dc28b0839792a4f482ba913878809c0260dd993e1242127c6c9a7ab38f7574719da68ce329ddcb5"}, &(0x7f0000000040)=0xa5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x1ff) 23:28:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x5865}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:27 executing program 4: [ 844.895107][T16783] dlm: dev_write no op 34bde833 a95e29700010 23:28:27 executing program 4: 23:28:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:27 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000001"], 0x40) 23:28:27 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', r2}) 23:28:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 845.128653][T17193] dlm: dev_write no op 34bde833 a95e29700010 23:28:27 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:27 executing program 4: 23:28:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:27 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000002"], 0x40) 23:28:27 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x642c00, 0xeb7a1eb824c25656) openat$cgroup_procs(r1, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) r2 = socket(0x18, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) lseek(r2, 0x0, 0x2) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$VT_DISALLOCATE(r0, 0x5608) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6558}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:27 executing program 4: [ 845.437960][T17487] dlm: dev_write no op 34bde833 a95e29700010 23:28:27 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000003"], 0x40) 23:28:27 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x50000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x1, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r1, 0x10000}, 0x8) recvfrom$unix(r0, &(0x7f0000000100)=""/131, 0x83, 0x14050, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x3f, 0x0, 0x40007ffc0000}]}) r2 = socket(0x18, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e23, @local}}}, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r3, &(0x7f00000003c0)='./file0\x00', 0x4) 23:28:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6800}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:28 executing program 4: [ 845.668523][T17815] dlm: dev_write no op 34bde833 a95e29700010 23:28:28 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x5000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6c00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:28 executing program 4: 23:28:28 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000004"], 0x40) 23:28:28 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf71}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x24000080) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$RTC_VL_CLR(r2, 0x7014) socket$inet6(0xa, 0x800, 0x0) 23:28:28 executing program 4: [ 846.019459][T18157] dlm: dev_write no op 34bde833 a95e29700010 23:28:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7400}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:28 executing program 4: 23:28:28 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000005"], 0x40) 23:28:28 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6) [ 846.259788][T18481] dlm: dev_write no op 34bde833 a95e29700010 23:28:29 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x6000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000006"], 0x40) 23:28:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7a00}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:29 executing program 4: 23:28:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000100)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x9, 0x6}, &(0x7f0000000180)=0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r4 = socket(0x18, 0x0, 0x0) getpeername$packet(r4, 0x0, &(0x7f00000002c0)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000180)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r7, 0x8, 0x6}, 0xc) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r0, r8, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_G_INPUT(r8, 0x80045626, &(0x7f0000000000)) socket$inet6(0xa, 0x6, 0x2) [ 846.683834][T18810] dlm: dev_write no op 34bde833 a95e29700010 [ 846.709259][T18813] validate_nla: 6 callbacks suppressed [ 846.709268][T18813] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000000200"/32, 0x20) 23:28:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000007"], 0x40) 23:28:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8100}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000500)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) socket$inet6(0xa, 0x1, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x600) getsockopt$inet_buf(r4, 0x0, 0x9, &(0x7f0000000040)=""/43, &(0x7f0000000100)=0x2b) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40c0022}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1e8, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff8656}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa905}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x148c0}, 0x4000) [ 846.899053][T19026] dlm: dev_write no op 34bde833 a95e29700010 23:28:29 executing program 4: clone(0x3102003bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x20002}, 0x3c) [ 847.056222][T19037] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:29 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000020"], 0x40) 23:28:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xdc15}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:29 executing program 4: clone(0x3102003bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x20002}, 0x3c) 23:28:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x38ca44395fbf7f91) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x200000c0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x118, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xce31}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6693ba87}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2eb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd96}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2f4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x27c, r3, 0x80, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x128, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x33, @empty, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x1f}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf01}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 847.398078][T19449] dlm: dev_write no op 34bde833 a95e29700010 [ 847.407959][T19451] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f40000003f"], 0x40) [ 847.457342][ T26] kauditd_printk_skb: 551 callbacks suppressed [ 847.457356][ T26] audit: type=1326 audit(1568071709.882:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 847.533305][T19651] dlm: dev_write no op 34bde833 a95e29700010 23:28:30 executing program 4: clone(0x3102003bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x20002}, 0x3c) 23:28:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000048"], 0x40) [ 847.609617][ T26] audit: type=1326 audit(1568071709.882:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 847.662653][T19699] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 847.695863][ T26] audit: type=1326 audit(1568071709.882:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 847.736844][T19824] dlm: dev_write no op 34bde833 a95e29700010 [ 847.827525][ T26] audit: type=1326 audit(1568071709.942:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 847.914331][ T26] audit: type=1326 audit(1568071709.942:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 847.951994][ T26] audit: type=1326 audit(1568071709.942:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 847.987016][ T26] audit: type=1326 audit(1568071709.942:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 848.013432][ T26] audit: type=1326 audit(1568071709.942:6578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:30 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f40000004c"], 0x40) 23:28:30 executing program 4: clone(0x3102003bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x20002}, 0x3c) 23:28:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x34000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 848.042255][ T26] audit: type=1326 audit(1568071709.942:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 848.068200][ T26] audit: type=1326 audit(1568071709.942:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19517 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 848.108746][T20089] dlm: dev_write no op 34bde833 a95e29700010 [ 848.108975][T20090] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:30 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6, 0x4a523) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r3 = perf_event_open(0x0, 0x0, 0x5, r1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) fsetxattr(r3, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000140)='/dev/uinput\x00', 0xc, 0x1) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000040)={0x5, {0xffff, 0xfff, 0x2, 0x1, 0x4, 0x8}}) socket$inet6(0xa, 0x1, 0x0) r5 = getpid() getpriority(0xfffffffffffffffe, r5) prlimit64(r5, 0x0, &(0x7f0000000180)={0x0, 0x304fae88}, &(0x7f00000001c0)) 23:28:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000060"], 0x40) 23:28:30 executing program 4: clone(0x3102003bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) 23:28:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0xff}, 0x1c) 23:28:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x400300}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000068"], 0x40) [ 848.365563][T20332] dlm: dev_write no op 34bde833 a95e29700010 [ 848.389754][T20341] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:30 executing program 4: clone(0x3102003bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) [ 848.504851][T20615] dlm: dev_write no op 34bde833 a95e29700010 23:28:31 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x12000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0}, 0xff}, 0x1c) 23:28:31 executing program 5: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) getsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000400), &(0x7f0000000440)=0x4) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r1 = socket(0x18, 0x0, 0x0) r2 = socket$inet6(0xa, 0xf823a8ba946e7871, 0x1) close(r2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000480)) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x248}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x298, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x417}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5af0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3078}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x757}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x643}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xedd2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x832}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x120, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @rand_addr="b54274d44a661a8125483e5c83a536cd", 0x80}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x7}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, [], 0xd}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x101, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x11b63fa7ad86922a}, 0x4000004) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf0ffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) 23:28:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f40000006c"], 0x40) [ 848.729417][T20629] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 848.748834][T20637] dlm: dev_write no op 34bde833 a95e29700010 23:28:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:31 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 23:28:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0}, 0xff}, 0x1c) 23:28:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000074"], 0x40) 23:28:31 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 848.905575][T20861] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:31 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xd95, 0x210002) r0 = getpid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) perf_event_open(0x0, r0, 0x8, r2, 0x0) socket$inet6(0xa, 0xa, 0xe0) socket$inet6(0xa, 0x1, 0x0) [ 848.965539][T20904] dlm: dev_write no op 34bde833 a95e29700010 23:28:31 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x3f000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f40000007a"], 0x40) 23:28:31 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 23:28:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0}, 0xff}, 0x1c) [ 849.246015][T21233] dlm: dev_write no op 34bde833 a95e29700010 [ 849.258141][T21248] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:31 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) 23:28:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0}, 0xff}, 0x1c) 23:28:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) [ 849.392005][T21454] dlm: dev_write no op 34bde833 a95e29700010 23:28:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 849.587758][T21619] dlm: dev_write no op 34bde833 a95e29700010 [ 849.605416][T21615] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:32 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x40000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:32 executing program 5: ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=""/4) seccomp(0x3, 0x1, &(0x7f0000000080)={0x2000000000000084, &(0x7f00000000c0)=[{0x8000100000006, 0xfffffffffffffffc}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xd1, &(0x7f0000ff0000/0x10000)=nil, 0x2) socket$inet6(0xa, 0x1, 0x0) seccomp(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x81, 0x7, 0xfffffffffffffff7, 0x8}, {0x9, 0xd73a681, 0x7ff, 0x8}]}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x105480, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7) 23:28:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) 23:28:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0}, 0xff}, 0x1c) 23:28:32 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) [ 849.848665][T21814] dlm: dev_write no op 34bde833 a95e29700010 23:28:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0}, 0xff}, 0x1c) 23:28:32 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x5000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:32 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4004240b, &(0x7f00000002c0)={0x1, 0x70, 0x3f, 0x4, 0x3, 0x2, 0x0, 0xfffffffffffffff8, 0x41040, 0x18, 0xfffffffffffffff7, 0x4, 0x4, 0x5f2, 0xfffffffffffffffc, 0x3, 0x8001, 0x7, 0x80000000, 0x7, 0x2, 0x20, 0x7, 0x6, 0x8001, 0x8, 0xf22, 0x4, 0x1, 0x5, 0x4, 0x4, 0x3, 0x0, 0x30, 0x4, 0x8, 0x2f5e, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000280), 0x2}, 0x10000, 0x98, 0x5, 0x6, 0x4, 0x3e40, 0x2}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) sync_file_range(r3, 0x20, 0x3, 0x4) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r4 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x1, 0x101) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000100)="f1fcc3142fab8907824b8711f694fd39c5cd6299605665cced5fed22d4bbab3f6fe29ed0a838a5eb64a0ade6ed4dafe6975febef0c921755268197d584276a96716327", &(0x7f0000000180)=""/148}, 0x18) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x0) 23:28:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) [ 850.062448][T22127] dlm: dev_write no op 34bde833 a95e29700010 23:28:32 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xff000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0}, 0xff}, 0x1c) 23:28:32 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x4, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) 23:28:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:32 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000040)) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x80000000, 0x0, 0x20, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffffaf}) r3 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) [ 850.396959][T22464] dlm: dev_write no op 34bde833 a95e29700010 23:28:32 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x0}, 0xff}, 0x1c) 23:28:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) 23:28:33 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) sendto$unix(r0, &(0x7f0000000100)="1916655e36a75b197ef432f9447a833c03a6200774f005edbf32be62a7e341b2abcb8ca48c92339cd1be0fc352d19d29210c54f912344346d2bfcedc4c81624746fa1994fd589242c9094d43fa3ad58705176ecd725fc7bfbc3980ebe508ef7cc151180b5898a8e4ca410b0d4f1013a4360eadec7ea0fe549189921ae46700e04785b9d0f8f66263ebace36afbdd1b082dd9f7ee31028a0921ab", 0x9a, 0x10, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) [ 850.607698][T22786] dlm: dev_write no op 34bde833 a95e29700010 23:28:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x10000000000080, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) 23:28:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x0}, 0xff}, 0x1c) 23:28:33 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) ioctl$KDSKBLED(r1, 0x4b65, 0x41) sendfile(r0, r1, 0x0, 0x80001d00c0d0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x3}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x9, 0x8000, 0x8}, &(0x7f0000000140)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xffffffffffffffff}}, 0x10) socket$inet6(0xa, 0x1, 0x0) 23:28:33 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7ffffffffffff, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) [ 850.948300][T23106] dlm: dev_write no op 34bde833 a95e29700010 23:28:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x0}, 0xff}, 0x1c) 23:28:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x9000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 851.099428][T23305] dlm: dev_write no op 34bde833 a95e29700010 23:28:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) 23:28:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:33 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') 23:28:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x0}, 0xff}, 0x1c) [ 851.302380][T23533] dlm: dev_write no op 34bde833 a95e29700010 23:28:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x20002}, 0x3c) 23:28:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 851.465030][T23779] dlm: dev_write no op 34bde833 a95e29700010 23:28:34 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x100000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x0}, 0xff}, 0x1c) 23:28:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080}, 0x3c) 23:28:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket(0x18, 0x0, 0x0) getpeername$packet(r4, 0x0, &(0x7f00000002c0)) r5 = socket(0x18, 0x0, 0x0) getpeername$packet(r5, 0x0, &(0x7f00000002c0)) r6 = socket(0x18, 0x0, 0x0) getpeername$packet(r6, 0x0, &(0x7f00000002c0)) r7 = socket(0x18, 0x0, 0x0) getpeername$packet(r7, 0x0, &(0x7f00000002c0)) r8 = socket(0x18, 0x0, 0x0) getpeername$packet(r8, 0x0, &(0x7f00000002c0)) r9 = socket(0x18, 0x0, 0x0) getpeername$packet(r9, 0x0, &(0x7f00000002c0)) r10 = socket(0x18, 0x0, 0x0) getpeername$packet(r10, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001940)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYBLOB="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"], @ANYRES16, @ANYRES64, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16=r8, @ANYRESDEC=r9], @ANYRESOCT=r10, @ANYRES16, @ANYRESDEC], @ANYBLOB="b941a5b310962d0b2c4f6e489bb49db486bedf4f7c1fcc40f31724df139f4667dae79daa0a23ef67e24427c5892463e276be4927d7226ef11adae092f7e70c00f96dee4579572efe06f1aa600dddfee29984b6ac3e1c4233f6f79a2575c6f8c1c0ffe720e3f1710f61384d035c30", @ANYRESHEX, @ANYRESDEC, @ANYRES32=r6, @ANYRESOCT=r0, @ANYBLOB="45c671907097a733c0dad15544ee891e08a60e79647a9e3ccc101d2d31a440301d1620286b17ced053b71ef2ebc5115eaa488a2307d687228376e40bf7e31a4291e24a0c20fe9137a870882eeef030a47e35d102ed60441657ff7242d069d3485aa68df4bb06cbb628cce10e39f16185372179163e25d8c2d10bedb8dc2e547ade4997603569789ec50ded624cf411d2c5d34a57c1b7a9f11cba916e563c75566b1f11c8dc38b913", @ANYRESDEC=r5], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x8, 0x8, 0x8001, 0x2}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 851.694507][T23974] dlm: dev_write no op 34bde833 a95e29700010 23:28:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080}, 0x3c) 23:28:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x0}, 0xff}, 0x1c) 23:28:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 851.796240][T24079] validate_nla: 7 callbacks suppressed [ 851.796249][T24079] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x10000000000080}, 0x3c) 23:28:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0xfffffffffffffff9, 0xffffffffffffffff, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x100000000) socket$inet6(0xa, 0x1, 0x0) [ 851.964857][T24258] dlm: dev_write no op 34bde833 a95e29700010 23:28:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 852.145001][T24404] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:34 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x200000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r0, 0x0) close(0xffffffffffffffff) 23:28:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x0}, 0xff}, 0x1c) 23:28:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x3, 0x0, 0xc14, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x40405) dup2(r2, r1) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff1000/0xb000)=nil], 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 852.280175][T24612] dlm: dev_write no op 34bde833 a95e29700010 23:28:34 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0x0}, 0xff}, 0x1c) [ 852.372442][T24757] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924921ae, 0x0) [ 852.460873][ T26] kauditd_printk_skb: 565 callbacks suppressed [ 852.460887][ T26] audit: type=1326 audit(1568071714.892:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24661 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 852.568881][T24926] dlm: dev_write no op 34bde833 a95e29700010 23:28:35 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt(r0, 0xe00e, 0x2, &(0x7f0000000000)="564f595f9e27b54b101e50f5a50fb5", 0xf) 23:28:35 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 852.654317][ T26] audit: type=1326 audit(1568071714.892:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24661 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 852.684020][T25058] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 852.763278][T25239] dlm: dev_write no op 34bde833 a95e29700010 [ 852.778551][ T26] audit: type=1326 audit(1568071714.892:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24661 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 852.810011][ T26] audit: type=1326 audit(1568071714.892:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24661 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 852.856204][ T26] audit: type=1326 audit(1568071714.922:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24661 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 852.914533][ T26] audit: type=1326 audit(1568071714.932:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24661 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 852.937453][ T26] audit: type=1326 audit(1568071714.972:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24661 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 852.968841][ T26] audit: type=1326 audit(1568071714.972:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24661 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:35 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x300000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0x0}, 0xff}, 0x1c) 23:28:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924921ae, 0x0) 23:28:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:35 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 853.000685][ T26] audit: type=1326 audit(1568071714.982:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24661 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:35 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_GET_SECUREBITS(0x1b) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) fcntl$getown(r0, 0x9) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00') [ 853.082715][T25453] dlm: dev_write no op 34bde833 a95e29700010 [ 853.093731][T25457] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 853.116587][ T26] audit: type=1326 audit(1568071715.542:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25450 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0x0}, 0xff}, 0x1c) 23:28:35 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400020000"], 0x40) 23:28:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x11000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:35 executing program 4: [ 853.275852][T25761] dlm: dev_write no op 34bde833 a95e29700010 23:28:35 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="65470f01f8d82bc744240002000000c744240283000000c7442406000000000f0114246767420f01d10f0766baa00066b8000066ef420f011d0d00000048b802000000000000000f23d00f21f835100000090f23f8450f070f01f4", 0x5b}], 0x1, 0x18, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="05000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x828a00, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r3, 0x1}, 0x8) 23:28:35 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400030000"], 0x40) [ 853.400831][T25772] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 853.475219][T25869] dlm: dev_write no op 34bde833 a95e29700010 23:28:36 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x400000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:36 executing program 4: 23:28:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x12000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:36 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400040000"], 0x40) 23:28:36 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x80, 0x7, 0x8}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x3ff}, 0xfffffffffffffc9b) r1 = open(&(0x7f0000000000)='./bus\x00', 0x541042, 0xd8) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x621, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1ff}}}, 0x24}}, 0x0) [ 853.693296][T26087] dlm: dev_write no op 34bde833 a95e29700010 [ 853.702506][T26086] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:36 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400050000"], 0x40) 23:28:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x13000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e], 0x0, 0x0}, 0xff}, 0x1c) 23:28:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x30, 0x0, 0x31c, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffff", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000000000000007410000004c00180000000073797a3000"/98], 0x68}}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/138, 0x8a}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/129, 0x81}], 0x38}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)={0x14, 0x42, 0x105}, 0x14}}, 0x0) [ 853.896408][T26481] dlm: dev_write no op 34bde833 a95e29700010 [ 853.905430][T26474] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:36 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffffffffff81, 0x602500) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0xe9, "aecc23d17c11fd466f69503e76633f06c77a5c72ff92beed1e19f952d606b96c0004ee18b28cda769d9d41a7d0808521814a64f2170d8e1e21d592e55e043c26bd05e8be8389a9c1f79e9d09689b14ce7eb77beda9437228304429ca41aeafcdfa19673139b8a698ffd3e8fd02ad7a4215ddbb39ad89e237c6e69159f03c6640f12a48856be5cb587123460ceee7c6b2861cc3993390d2bc296c63c1db802df08ca99c6caa4134b2f82ebd06aa2dd2383fe78f5e3a77fa6a5cdcbae61d97d6ba0f6f5a0a75a56bc9b1c591019da9f9c96699dd9340f0fc2fe9b379e89bce7f55bda23ea607d8979afd"}, &(0x7f0000000240)=0x10d) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14, 0x80000) 23:28:36 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x500000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:36 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400060000"], 0x40) 23:28:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800], 0x0, 0x0}, 0xff}, 0x1c) 23:28:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x14000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f00000000c0)="7f6f31ff162c660ff8") 23:28:36 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000000040)={0xffffffffffffff80, 0x10003, "8b330525e2e8bcb311d27ba59da172ba790383d2eb11aa51", {0x8100000000000000, 0x3}, 0xfffffffffffffffa}) 23:28:36 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r2 = socket$inet(0x10, 0x2, 0x0) dup3(r2, r0, 0x0) [ 854.308944][T26925] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 854.314237][T26951] dlm: dev_write no op 34bde833 a95e29700010 23:28:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:36 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400070000"], 0x40) 23:28:36 executing program 5: perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x20000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 854.501136][T27281] dlm: dev_write no op 34bde833 a95e29700010 23:28:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 854.619617][T27450] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 854.655818][T27453] binder: 27452:27453 ioctl c0306201 0 returned -14 23:28:37 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x600000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e23], 0x0, 0x0}, 0xff}, 0x1c) 23:28:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400480000"], 0x40) 23:28:37 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0x3}, 0xffffffffffffffb0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000000)={0x6, 0x6, 0x100000000, 0x9, 'syz1\x00', 0x7}) seccomp(0x0, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000100)=[{0x4, 0xb63, 0xea6, 0x1f}, {0x4, 0x101, 0x7, 0x9}, {0xfffffffffffffe04, 0x1, 0x0, 0x1000}, {0x7ff, 0x7, 0xfffffffffffffff7, 0x7f}, {0x9, 0x1, 0x8, 0x1841}, {0x7, 0x400, 0x0, 0x7fc}, {0x103, 0x0, 0x80, 0x9bc}, {0x3, 0x1, 0x40001680000}, {0x7, 0x20, 0x7, 0x101}, {0x5, 0xa, 0x8, 0x7ff}]}) perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:37 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}}}, 0x84) 23:28:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3f000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:37 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xc4) [ 854.868752][T27670] dlm: dev_write no op 34bde833 a95e29700010 23:28:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f4004c0000"], 0x40) 23:28:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x40000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800], 0x0, 0x0}, 0xff}, 0x1c) 23:28:37 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) [ 855.107457][T28076] dlm: dev_write no op 34bde833 a95e29700010 23:28:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400600000"], 0x40) [ 855.306768][T28376] dlm: dev_write no op 34bde833 a95e29700010 23:28:37 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x700000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:37 executing program 5: r0 = getpid() getpriority(0xfffffffffffffffe, r0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x20, 0x808000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={r4, 0x1}, 0x8) 23:28:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x48000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400680000"], 0x40) 23:28:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000800000000800, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x3c) 23:28:37 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f4006c0000"], 0x40) [ 855.460837][T28408] dlm: dev_write no op 34bde833 a95e29700010 23:28:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400], 0x0, 0x0}, 0xff}, 0x1c) 23:28:38 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) clone(0x20000000, &(0x7f0000000000)="6a90ab4a0df7ebbab8c682b929ea50b1a37d7a27d00e6cde7a947bfa882dbe7aff007885b03c0c560eb01ce191a3659ed3", &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)="363c268fad149f3ed667ddb707d0d9c824e7687dcdd36ac3348572487f31336dc3f476bc2cf0894df4028b793263427383f1f0f992a8f97d5cd50e5209a998f3f348c2d7a9976f41cc2fb4e489c2ac11034685e6f36980cbd2f483f9fb65053e7935dbc71f34ddb89ec20481525295aa6303f2695ddffc7453ca00efa0bf4b474ce8b7dd808a") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4c000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 855.607425][T28702] dlm: dev_write no op 34bde833 a95e29700010 23:28:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") 23:28:38 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400740000"], 0x40) [ 855.856743][T29041] dlm: dev_write no op 34bde833 a95e29700010 23:28:38 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x800000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x60000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:38 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x2, 0x0, "0c4e5ac1f6539a77386d296de94faf76f387199aa3ef418ee8af00440efbc6cc432d91c0cb7e781903d197b51718ee76b1fc30952e470e8b462454459c965c49bf1e5c2a55f244967bc810b51a7276e1"}, 0xd8) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) r2 = dup3(r1, r0, 0x80000) fcntl$getflags(r2, 0x408) 23:28:38 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f4007a0000"], 0x40) 23:28:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00], 0x0, 0x0}, 0xff}, 0x1c) 23:28:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x65580000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 856.075354][T29392] dlm: dev_write no op 34bde833 a95e29700010 [ 856.088256][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 856.094057][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 856.099996][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 856.105747][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 856.111918][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 856.117673][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:28:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x6f, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 23:28:38 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000300"], 0x40) 23:28:38 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r3, 0x2}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x80000000}, &(0x7f0000000100)=0x8) 23:28:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x68000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:38 executing program 4: r0 = socket(0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x141) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\xed\xff\xff\xff\xff\xff\xff\xff'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 856.373309][T29697] dlm: dev_write no op 34bde833 a95e29700010 23:28:39 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1200000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:39 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7ff, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x401, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000500"], 0x40) 23:28:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6c000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 856.662090][T29936] dlm: dev_write no op 34bde833 a95e29700010 23:28:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000600"], 0x40) 23:28:39 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) socket$inet6(0xa, 0x1, 0x0) r0 = getpid() r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80585414, &(0x7f0000000240)=""/84) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000100)=""/219) getpriority(0xfffffffffffffffe, r0) tkill(r0, 0xc) 23:28:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$void(r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="16"}) [ 856.849826][T30251] dlm: dev_write no op 34bde833 a95e29700010 23:28:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000700"], 0x40) 23:28:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x74000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:39 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @broadcast, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@mcast1, 0x62, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 857.055063][T30406] dlm: dev_write no op 34bde833 a95e29700010 [ 857.063425][T30405] binder: 30352:30405 ioctl 0 0 returned -22 [ 857.106582][T30409] validate_nla: 8 callbacks suppressed [ 857.106590][T30409] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:39 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x3f00000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400002000"], 0x40) 23:28:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 23:28:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7a000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:39 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4, 0x400) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0xe0200, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x18, 0x0, 0x0) getpeername$packet(r4, 0x0, &(0x7f00000002c0)) r5 = socket(0x10, 0x3, 0x0) connect$rxrpc(r4, &(0x7f00000008c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @empty, 0x7f}}, 0x24) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100006}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r6, 0x400, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x78, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffff2b8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20004450}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3cac0000", @ANYRES16=r6, @ANYBLOB="000426bd7000fcdbdf25010000000800050001000000"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) r7 = fcntl$dupfd(r2, 0x0, r3) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f00000001c0)={0x7, 0x2, 0x1, {0x20, 0x3, 0x9, 0x5}}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) sched_getscheduler(r8) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000100)=0x4) r9 = creat(&(0x7f0000000600)='./file0\x00', 0x20) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000000640)={0x3, 0x8000, 0x1, 0x100000001, 0xa, [{0x20, 0x9, 0x101, 0x0, 0x0, 0xce43149113120a69}, {0x0, 0xffff, 0xe36, 0x0, 0x0, 0x37c4}, {0x75ff, 0x5, 0xffff, 0x0, 0x0, 0x100}, {0x5, 0x3ff, 0x9}, {0x5, 0x7, 0x9, 0x0, 0x0, 0x400}, {0x5, 0x8, 0x81, 0x0, 0x0, 0x5}, {0x3f, 0x6, 0x5b0}, {0x8, 0x8f2, 0xfff, 0x0, 0x0, 0xe00}, {0xb2, 0x7, 0x8000, 0x0, 0x0, 0x904}, {0x8000000, 0x9, 0x3ac, 0x0, 0x0, 0x8}]}) [ 857.357916][T30725] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 857.367073][T30724] dlm: dev_write no op 34bde833 a95e29700010 23:28:39 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400003f00"], 0x40) 23:28:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x80060000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 857.514782][T31070] dlm: dev_write no op 34bde833 a95e29700010 23:28:40 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10001, 0x240101) r1 = getpid() getpriority(0xfffffffffffffffe, r1) perf_event_open(0x0, r1, 0xffffffffffffffff, r0, 0x2) socket$inet6(0xa, 0x1, 0x0) 23:28:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400004800"], 0x40) 23:28:40 executing program 4: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000800000000800, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x3c) [ 857.638306][ T26] kauditd_printk_skb: 528 callbacks suppressed [ 857.638318][ T26] audit: type=1326 audit(1568071720.062:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 857.696597][T31197] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 857.729626][ T26] audit: type=1326 audit(1568071720.062:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 857.733135][T31261] dlm: dev_write no op 34bde833 a95e29700010 [ 857.816562][ T26] audit: type=1326 audit(1568071720.062:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 857.858906][ T26] audit: type=1326 audit(1568071720.102:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 857.921189][ T26] audit: type=1326 audit(1568071720.102:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 857.949237][ T26] audit: type=1326 audit(1568071720.102:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 857.976327][ T26] audit: type=1326 audit(1568071720.102:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:40 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4000000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:40 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lapb0\x00', 0x2}, 0x18) 23:28:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400004c00"], 0x40) 23:28:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x81000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:40 executing program 4: io_setup(0xa, &(0x7f00000001c0)) io_setup(0x5, &(0x7f0000000140)) io_setup(0x5, &(0x7f00000002c0)) io_setup(0x3fe, &(0x7f0000000180)) io_setup(0x10fc, &(0x7f0000000200)) [ 858.001208][ T26] audit: type=1326 audit(1568071720.102:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 858.036933][ T26] audit: type=1326 audit(1568071720.102:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 858.079526][T31558] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 858.105496][T31563] dlm: dev_write no op 34bde833 a95e29700010 [ 858.133408][ T26] audit: type=1326 audit(1568071720.102:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400006000"], 0x40) 23:28:40 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:40 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x18000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00'}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:28:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x88a8ffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400006800"], 0x40) [ 858.336954][T31974] dlm: dev_write no op 34bde833 a95e29700010 [ 858.364555][T31981] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 858.500411][T32151] dlm: dev_write no op 34bde833 a95e29700010 23:28:41 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xff00000000000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:41 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140), 0xc88) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r4 = open(&(0x7f0000000000)='./bus\x00', 0x44242, 0x8) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) r5 = getpid() getpriority(0xfffffffffffffffe, r5) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xebe, 0x551, 0x7, 0x100000001, 0x0, 0xffffffffffffffc0, 0x800, 0xc, 0x80000001, 0x1, 0x8, 0x4, 0x0, 0xb0, 0xffffffff, 0x1000, 0xaa, 0x800, 0x3, 0x28, 0x4, 0x728, 0x5, 0x2, 0x9, 0x2, 0xffff, 0x6, 0x7, 0x3ff, 0x1, 0x81, 0x7fffffff, 0x5, 0x6, 0x5, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0xb}, 0x40, 0x0, 0x8, 0x6, 0x1ff, 0x1, 0x9}, r5, 0x0, 0xffffffffffffffff, 0x0) unlinkat(r4, &(0x7f0000000040)='./bus\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r6, 0xab03) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x7, 0x6d, 0x1}, 0x7) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000000)={0x7, 0x4000}) 23:28:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x9effffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400006c00"], 0x40) 23:28:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2}) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 858.644224][T32298] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 858.684082][T32322] dlm: dev_write no op 34bde833 a95e29700010 23:28:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400007400"], 0x40) 23:28:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xdc150000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:41 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 858.957551][ T342] dlm: dev_write no op 34bde833 a95e29700010 23:28:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001840)={{0x80}, 'port0\xa5\xfe\x98W\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe5\x00\x05\x00', 0xffffffffffdfffff, 0x3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x4}], 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x2de) [ 858.998694][ T350] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:41 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xffffffff00000000, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400007a00"], 0x40) 23:28:41 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) socket$inet6(0xa, 0x1, 0x0) 23:28:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf0ffffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:41 executing program 4: r0 = timerfd_create(0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x1ff) timerfd_settime(r0, 0x3, &(0x7f0000000040), 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='gid_map\x00') ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000600)={0x2, &(0x7f0000000300)=""/185, &(0x7f00000005c0)=[{0xfa36, 0xc8, 0x101, &(0x7f00000004c0)=""/200}, {0xfffffffffffffffe, 0x0, 0x4, 0x0}]}) fcntl$dupfd(r0, 0x0, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x6}, [{0x2, 0x1, r4}, {0x2, 0x0, r4}, {0x2, 0x0, r4}], {0x4, 0x5e269fa687e04fdd}, [{0x8, 0x6, r5}, {0x8, 0x0, r5}, {0x8, 0x4, r5}, {0x8, 0x1, r5}], {0x10, 0x2}, {0x20, 0x7}}, 0x5c, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x6}, [{}, {0x2, 0x4}, {}], {0x4, 0x5e269fa687e04fdd}, [{0x8, 0x6}, {}, {0x8, 0x4}, {0x8, 0x1}], {0x10, 0x2}}, 0x5c, 0x2) 23:28:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e0000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 859.373835][ T773] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 859.386061][ T775] dlm: dev_write no op 34bde833 a95e29700010 23:28:41 executing program 5: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="736563757269747900000000000000000200000000000000000000000000000013000000784c3c9405179cbe6243434886b1f7ef0cc9d0"], &(0x7f0000000040)=0x37) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0xffffffff80000001) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x400000, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000017c0)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000001800)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, r3}, 0x14) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x400000, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0xff, 0x24ba0) r6 = socket(0x18, 0x0, 0x0) getpeername$packet(r6, 0x0, &(0x7f00000002c0)) r7 = fcntl$getown(r6, 0x9) fcntl$lock(r5, 0x7, &(0x7f0000000240)={0x1, 0x79a80dea84c945b8, 0x8000, 0x5, r7}) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x9, 0x40007ffc0000}]}) setsockopt$inet_mreqsrc(r1, 0x0, 0x25c9bb419cd9c3dc, &(0x7f0000000300)={@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000340)) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002b008163e45ae08700000000040f0000000000bc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1, 0x0, 0x163}, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf1ffffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000], 0x0, 0x0}, 0xff}, 0x1c) [ 859.531943][ T1068] dlm: dev_write no op 34bde833 a95e29700010 23:28:42 executing program 4: r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) 23:28:42 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 859.621994][ T1096] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 859.700157][ T1274] dlm: dev_write no op 34bde833 a95e29700010 23:28:42 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffff0700, 0x401}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:42 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0xfffffffffffffffc, 0x0, 0x40007ffc0000}]}) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:42 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffffa888}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80), 0x4924924924921ae, 0x0) [ 859.972213][ T1531] dlm: dev_write no op 34bde833 a95e29700010 [ 859.972848][ T1534] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:42 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000000c0), 0xffffffffffffff68, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) 23:28:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:42 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfffff000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:42 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200800, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0245628, &(0x7f0000000100)={0x0, 0x1, 0x100000000, [], &(0x7f0000000040)=0x5d}) membarrier(0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) [ 860.126792][ T1960] dlm: dev_write no op 34bde833 a95e29700010 [ 860.293446][ T2039] dlm: dev_write no op 34bde833 a95e29700010 23:28:42 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x402}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:42 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = semget$private(0x0, 0x207, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/114) 23:28:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffffff7f}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:42 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5, 0x44000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/107) socket$inet6(0xa, 0x1, 0x0) [ 860.571238][ T2388] dlm: dev_write no op 34bde833 a95e29700010 23:28:43 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffffff9e}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 860.718608][ T2777] dlm: dev_write no op 34bde833 a95e29700010 23:28:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x40000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 23:28:43 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:43 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) r1 = socket(0x18, 0x0, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000002c0)) r2 = getpid() r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) sendto(r3, &(0x7f0000000480)="5fdc49d701a0d4a256f23eb9e92a9d5c0ce5457f72964c98ab9d8a4d5922f671dbb63a14c03d8bc3caece539df092af639e88691948fed7e44cd9df74fab0e9e91b269f50e6354122d06058a1a656164d12b51ecc5255837c4a416237fe588702d0e7385e3ae604521d76e6e2252a72d9b25e5a256592d3f047fe13121836db40b1d9c8faabb0a60da2faf7f14a2142a374b3ab2219cd0f2c0157ef15f51f5ffb87712a240bb5e88e83926fe12772bf0eb3fa5950a90eb6d4ca0d5afab0259f1f6660142a9eb8828d05a531b88407dedcddabeafa89cb3e19af0090cdd121c1249c0", 0xe2, 0x200000c0, 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000580)=""/42) r4 = socket(0x18, 0x0, 0x0) lsetxattr(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)=@known='trusted.overlay.redirect\x00', &(0x7f0000000640)='#]\x00', 0x3, 0x2) getpeername$packet(r4, 0x0, &(0x7f00000002c0)) getpeername$tipc(r4, &(0x7f0000000380)=@id, &(0x7f00000003c0)=0x10) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x3ff, 0x8, 0x346a, 0x1ff, 0x0, 0x3ff, 0x34, 0xc, 0x800, 0x7fff, 0x8, 0x9, 0x40, 0x400, 0x1, 0x1, 0x4, 0x78, 0x4, 0x1000000000, 0x66f, 0x24, 0xbcfc, 0xfffffffffffffffc, 0x1, 0x1ff80000000, 0xfffffffffffffffc, 0x6, 0x1f, 0xfffffffffffffffb, 0x6, 0xfffffffffffffff7, 0x40, 0x2, 0x1000, 0x10000, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x200, 0x7, 0x1, 0x3, 0xfa0, 0x0, 0x80000001}, r2, 0xa, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) bind$packet(r1, &(0x7f0000000180)={0x11, 0x1c, r5, 0x1, 0x4, 0x6, @remote}, 0x14) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r6 = socket(0x18, 0x0, 0x0) getpeername$packet(r6, 0x0, &(0x7f00000002c0)) getpeername$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r7 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0xffffffffffffffad, 0x511000) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000440)={0x7, 0x4}) ioctl$NBD_DO_IT(r0, 0xab03) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc044560f, &(0x7f0000000040)={0xab5e, 0x9, 0x4, 0x8, {}, {0x1, 0x2, 0x428, 0x8, 0x1ff, 0x1, "0020cfc1"}, 0x0, 0x4, @planes=&(0x7f0000000000)={0x800, 0x3, @mem_offset=0x9, 0xd4b}, 0x4}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 860.908890][ T3022] dlm: dev_write no op 34bde833 a95e29700010 23:28:43 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x403}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfffffff0}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:43 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x14) vmsplice(r0, &(0x7f0000000480), 0x0, 0x0) 23:28:43 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000002c0)) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x4, 0x5, 0x9, 0x2, 0x4, 0x2}, 0xe4}, 0xa) 23:28:43 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000f09346b1289ad047a670419df6e8e900030103000000000000000020"], 0x1f}}, 0x0) r0 = socket(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001000", 0x6) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 861.208895][ T3297] dlm: dev_write no op 34bde833 a95e29700010 23:28:43 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfffffff1}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:43 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = getpgrp(0x0) perf_event_open(0x0, r0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x3, 0x4002) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x519, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x3, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip_vti0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000445}, 0x20000000) socket$inet6(0xa, 0x1, 0x0) 23:28:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 861.428955][ T3630] dlm: dev_write no op 34bde833 a95e29700010 [ 861.442586][ T3627] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.4'. 23:28:44 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x405}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:44 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:44 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0xd00) 23:28:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x68000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:44 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) 23:28:44 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 861.845916][ T4067] dlm: dev_write no op 34bde833 a95e29700010 23:28:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:44 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x40030000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:44 executing program 5: seccomp(0x1, 0x1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 862.061823][ T4371] debugfs: File '4370' in directory 'proc' already present! [ 862.099820][ T4382] dlm: dev_write no op 34bde833 a95e29700010 23:28:44 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 862.247539][ T4788] dlm: dev_write no op 34bde833 a95e29700010 23:28:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:44 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 23:28:44 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) r0 = socket$inet6(0xa, 0x800, 0x80) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000100)={0x10000, 0x7}) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x0, 0x0) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x101}, 0x4) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x3ff, 0x4001) r4 = socket(0x18, 0x0, 0x0) getpeername$packet(r4, 0x0, &(0x7f00000002c0)) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 23:28:44 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x406}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:44 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf0ffffffffffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:44 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 862.457147][ T4799] validate_nla: 7 callbacks suppressed [ 862.457175][ T4799] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 862.466444][ T4804] dlm: dev_write no op 34bde833 a95e29700010 23:28:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x14) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x18) 23:28:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x100000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:45 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) perf_event_open(0x0, 0xffffffffffffffff, 0x7, r1, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 862.611692][ T5209] dlm: dev_write no op 34bde833 a95e29700010 23:28:45 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 862.725576][ T5252] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x6f, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 23:28:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 862.831555][ T5360] dlm: dev_write no op 34bde833 a95e29700010 23:28:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x200000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 863.034879][ T5638] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:45 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x408}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:45 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0xc180, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000800000000800, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x3c) 23:28:45 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x3) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000011c0)={'nr0\x00', 0xfffffffffffffff9}) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='user/\x00', 0xffffffffffffffff) keyctl$negate(0xd, r1, 0x3, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001200)='/dev/sequencer2\x00', 0xd2843, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001240)={@mcast2, @mcast2, @local, 0xb9, 0x7, 0x400, 0x500, 0x200, 0x4}) 23:28:45 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x300000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 863.230958][ T5752] dlm: dev_write no op 34bde833 a95e29700010 [ 863.239064][ T5748] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 863.251673][ T26] kauditd_printk_skb: 548 callbacks suppressed [ 863.251686][ T26] audit: type=1326 audit(1568071725.682:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x400000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:45 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffff9fffff3ffa7, &(0x7f0000000140)) [ 863.405348][ T26] audit: type=1326 audit(1568071725.682:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 863.441594][ T6098] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 863.450941][ T6108] dlm: dev_write no op 34bde833 a95e29700010 23:28:45 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xb800) socket$inet6(0xa, 0x1, 0x0) 23:28:46 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 863.541598][ T26] audit: type=1326 audit(1568071725.682:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 863.697211][ T26] audit: type=1326 audit(1568071725.742:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 863.733470][ T26] audit: type=1326 audit(1568071725.742:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 863.748885][ T6486] dlm: dev_write no op 34bde833 a95e29700010 [ 863.775488][ T26] audit: type=1326 audit(1568071725.742:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:46 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x410}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setgid(r1) 23:28:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x500000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:46 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) clone(0x40000000, &(0x7f0000000100)="b3e62f3b4894b0d2ea4b320eeb74802feca0f9ad5a01cf06162f1097a4fe284c75783f8cd718f82ad0de1414edc2ede78dd3f360c5f585fd47f3c0cd42815bb75f09006b81aca136ec3082c42f3339c8144ab81b44256347a7338681a92ad39cd3de997b5a204e3ed29489e846cd6159cb8292f86e0fa6aefe19e0b272677320f1f2f2f0e5b6a8db370af7c8c1c9c0d7ad66ce5f37feb584a858a003daab", &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="2918c68a24d898763f09732463b0e69ccfdeb3b26ca4bcbd474c2f89d64315ea0309c853db98633a335fdb4696daa780ddd37efe7fc1aac58f57e0533740cfaf6e3ebe6412bad9b3e292ae9bcca121a4343057b0b6dbbda54b45ec94f693c8292f4742a1a435d56faee279358573a31130e9652c0e3524c7bcea73d7771e7af47bef8bd2a26404fead53144089ead5") 23:28:46 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 863.832292][ T26] audit: type=1326 audit(1568071725.742:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 863.890205][ T6585] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 863.908966][ T26] audit: type=1326 audit(1568071725.742:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f79a29 code=0x7ffc0000 [ 863.952839][ T6678] dlm: dev_write no op 34bde833 a95e29700010 [ 863.986653][ T6592] IPVS: ftp: loaded support on port[0] = 21 23:28:46 executing program 4: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000069ddffbfffff0002060000000000000000000000ffffe0000002ff050000000000000000000000000001880090780009040060b680fa00000000000000ffffffff09000000000000000000f3ffffffac14ffbb000000000000006eb6e7dd787aa76c4cf3389463954bf35921d993fabe5fbe97ee77387021541c1fcdf8f124bacd03f793ca74111fb22edd"], 0x0) recvmmsg(r0, &(0x7f0000000000), 0x1ae, 0x20, 0x0) 23:28:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x600000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 864.016066][ T26] audit: type=1326 audit(1568071725.742:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:46 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234e000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 864.075395][ T26] audit: type=1326 audit(1568071725.742:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5743 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f79a29 code=0x7ffc0000 23:28:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="2400000012005f", 0x7) ioctl(r0, 0xfffff9fffff3ffa7, &(0x7f0000000140)) [ 864.182323][ T6954] dlm: dev_write no op 34bde833 a95e29700010 23:28:46 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 864.262112][ T6994] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 864.342155][ T7131] dlm: dev_write no op 34bde833 a95e29700010 23:28:46 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x413}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:46 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x700000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 864.497777][ T7382] dlm: dev_write no op 34bde833 a95e29700010 [ 864.554736][ T7481] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x20002003}) 23:28:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xfffff9ff00004c01, 0x0) 23:28:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:47 executing program 4: io_setup(0x0, 0x0) io_setup(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0xffffffffffffff68}], 0x1, &(0x7f00000015c0)=""/240, 0xd932, 0x8004000000000000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x2e9c000000000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 23:28:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x800000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 864.712297][ T7661] dlm: dev_write no op 34bde833 a95e29700010 23:28:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) [ 864.863860][ T7760] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 864.928722][ T7903] dlm: dev_write no op 34bde833 a95e29700010 23:28:47 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff000}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000540)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 23:28:47 executing program 4: io_uring_setup(0x749, &(0x7f0000000000)={0x0, 0x0, 0x5}) 23:28:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x900000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:47 executing program 4: io_setup(0x0, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) [ 865.174491][ T8072] dlm: dev_write no op 34bde833 a95e29700010 [ 865.182425][ T8076] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") unshare(0x20600) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setflags(r1, 0x2, 0x0) 23:28:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 865.376051][ T8316] dlm: dev_write no op 34bde833 a95e29700010 23:28:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 865.580288][ T8644] dlm: dev_write no op 34bde833 a95e29700010 23:28:48 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffffffffffff}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) write(r2, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:28:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001840)={{0x80}, 'port0\xa5\xfe\x98W\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe5\x00\x05\x00', 0xffffffffffdfffff, 0x3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 23:28:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) [ 865.824890][ T8724] dlm: dev_write no op 34bde833 a95e29700010 23:28:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000], 0x0, 0x0}, 0xff}, 0x1c) 23:28:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:48 executing program 4: clock_settime(0x0, &(0x7f0000000000)={0x0, 0x989680}) 23:28:48 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000008940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005ac0)=ANY=[@ANYBLOB="1000000000000000cc2a494bca3aaf96"], 0x10}}], 0x1, 0x0) 23:28:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000], 0x0, 0x0}, 0xff}, 0x1c) [ 866.122989][ T9219] dlm: dev_write no op 34bde833 a95e29700010 23:28:48 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401, 0x2}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:48 executing program 4: io_setup(0x5, &(0x7f0000000140)) io_setup(0x5, &(0x7f00000002c0)) io_setup(0xfff, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x2e9c000000000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 23:28:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:48 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:48 executing program 5: ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x20002003}) 23:28:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0xff}, 0x1c) [ 866.436466][ T9568] dlm: dev_write no op 34bde833 a95e29700010 23:28:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:49 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000000"], 0x40) 23:28:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080), 0x10) 23:28:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffff9fffff3ffa7, &(0x7f0000000140)) 23:28:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0}, 0xff}, 0x1c) [ 866.695404][T10080] dlm: dev_write no op 34bde833 a95e29700010 [ 866.728274][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 866.734112][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:28:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1000000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:49 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401, 0x3}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:49 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000200"], 0x40) 23:28:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x0) 23:28:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$void(r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="16"}) 23:28:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0}, 0xff}, 0x1c) 23:28:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1100000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) [ 867.179280][T10583] binder: 10582:10583 ioctl 0 0 returned -22 [ 867.188085][T10590] dlm: dev_write no op 34bde833 a95e29700010 [ 867.190904][T10583] binder: 10582:10583 ioctl c0306201 200001c0 returned -11 23:28:49 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000300"], 0x40) 23:28:49 executing program 4: [ 867.253790][T10583] binder: 10582:10583 ioctl 0 0 returned -22 23:28:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0}, 0xff}, 0x1c) [ 867.337857][T10951] dlm: dev_write no op 34bde833 a95e29700010 23:28:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffff9ff000089a1, 0x0) 23:28:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1200000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:49 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000400"], 0x40) [ 867.533100][T11024] validate_nla: 7 callbacks suppressed [ 867.533109][T11024] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 867.573056][T11085] dlm: dev_write no op 34bde833 a95e29700010 23:28:50 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401, 0x4}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) fcntl$setpipe(r3, 0x407, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:28:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007ffc0000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0}, 0xff}, 0x1c) 23:28:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1300000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000500"], 0x40) 23:28:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000600"], 0x40) [ 867.827554][T11231] dlm: dev_write no op 34bde833 a95e29700010 [ 867.828515][T11235] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0}, 0xff}, 0x1c) 23:28:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x20002003}) 23:28:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1400000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0xffffffffffffff68}], 0x1, &(0x7f00000015c0)=""/240, 0xd932, 0x8004000000000000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x2e9c000000000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) [ 867.977370][T11591] dlm: dev_write no op 34bde833 a95e29700010 23:28:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400000700"], 0x40) [ 868.139959][T11758] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:28:50 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401, 0x5}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 23:28:50 executing program 5: 23:28:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0}, 0xff}, 0x1c) 23:28:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2000000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400004800"], 0x40) 23:28:51 executing program 5: [ 868.757108][T12230] dlm: dev_write no op 34bde833 a95e29700010 23:28:51 executing program 5: 23:28:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000ff0082b0cfc4336aa677f737be0633e8bd34100070295ea9000056cb000000ad88f7e4a270ffffffc087223ba7f400004c00"], 0x40) 23:28:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3f00000000000000}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x6, 0x3}]}}]}, 0x38}}, 0x0) 23:28:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='ip_vti0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0}, 0xff}, 0x1c) [ 869.081263][T12357] dlm: dev_write no op 34bde833 a95e29700010 [ 869.102755][T12364] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 973.338168][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 973.344870][ C0] rcu: 0-....: (1 GPs behind) idle=e12/1/0x4000000000000002 softirq=146459/146460 fqs=5249 [ 973.354999][ C0] (t=10502 jiffies g=160785 q=4273) [ 973.360276][ C0] NMI backtrace for cpu 0 [ 973.364594][ C0] CPU: 0 PID: 11739 Comm: syz-executor.4 Not tainted 5.3.0-rc8+ #0 [ 973.372568][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.382601][ C0] Call Trace: [ 973.385872][ C0] [ 973.388714][ C0] dump_stack+0x172/0x1f0 [ 973.393028][ C0] nmi_cpu_backtrace.cold+0x70/0xb2 [ 973.398212][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.404435][ C0] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 973.410052][ C0] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 973.416016][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 973.421892][ C0] rcu_dump_cpu_stacks+0x183/0x1cf [ 973.426991][ C0] ? find_next_bit+0x107/0x130 [ 973.431753][ C0] rcu_sched_clock_irq.cold+0x4dd/0xc13 [ 973.437280][ C0] ? raise_softirq+0x138/0x340 [ 973.442029][ C0] update_process_times+0x32/0x80 [ 973.447216][ C0] tick_sched_handle+0xa2/0x190 [ 973.452269][ C0] tick_sched_timer+0x53/0x140 [ 973.457282][ C0] __hrtimer_run_queues+0x364/0xe40 [ 973.462478][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 973.467769][ C0] ? hrtimer_start_range_ns+0xcb0/0xcb0 [ 973.474002][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 973.479722][ C0] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 973.485784][ C0] hrtimer_interrupt+0x314/0x770 [ 973.490775][ C0] smp_apic_timer_interrupt+0x160/0x610 [ 973.496319][ C0] apic_timer_interrupt+0xf/0x20 [ 973.501243][ C0] [ 973.504206][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.511133][ C0] Code: 48 89 e5 48 8b 4d 08 e8 d8 fe ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 05 00 00 00 48 89 e5 48 8b 4d 08 e8 ba fe ff ff <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 f2 48 89 fe bf 07 00 00 00 [ 973.532034][ C0] RSP: 0018:ffff8880584868e8 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13 [ 973.540426][ C0] RAX: 0000000000000002 RBX: ffff8880962f3e38 RCX: ffffffff85c65b39 [ 973.548479][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 973.556517][ C0] RBP: ffff8880584868e8 R08: ffff888093b805c0 R09: 0000000000000000 [ 973.564465][ C0] R10: fffffbfff134afaf R11: ffff888093b805c0 R12: dffffc0000000000 [ 973.572678][ C0] R13: ffff8880962f3b40 R14: ffff8880962f3ed0 R15: 0000000000000000 [ 973.580715][ C0] ? hhf_dequeue+0xb9/0xa20 [ 973.585216][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.591434][ C0] hhf_dequeue+0xb9/0xa20 [ 973.595793][ C0] __qdisc_run+0x1e7/0x19d0 [ 973.601617][ C0] ? dev_queue_xmit+0x18/0x20 [ 973.606282][ C0] __dev_queue_xmit+0x16f1/0x3650 [ 973.611547][ C0] ? __local_bh_enable_ip+0x15a/0x270 [ 973.616916][ C0] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 973.622212][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 973.628472][ C0] ? br_nf_post_routing+0xd73/0x1d30 [ 973.633760][ C0] ? br_forward_finish+0x235/0x400 [ 973.638853][ C0] ? __kasan_check_read+0x11/0x20 [ 973.643860][ C0] ? perf_trace_lock+0xeb/0x4c0 [ 973.648700][ C0] dev_queue_xmit+0x18/0x20 [ 973.653186][ C0] ? dev_queue_xmit+0x18/0x20 [ 973.657864][ C0] br_dev_queue_push_xmit+0x3f3/0x5c0 [ 973.663747][ C0] ? nf_hook_slow+0xf0/0x1e0 [ 973.668333][ C0] br_forward_finish+0xfa/0x400 [ 973.673191][ C0] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 973.678718][ C0] ? br_fdb_add.cold+0x8c/0x8c [ 973.683464][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 973.689161][ C0] ? nf_hook_slow+0xf0/0x1e0 [ 973.693739][ C0] __br_forward+0x641/0xb00 [ 973.698221][ C0] ? br_forward_finish+0x400/0x400 [ 973.703323][ C0] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 973.708857][ C0] deliver_clone+0x61/0xc0 [ 973.713281][ C0] maybe_deliver+0x2c7/0x390 [ 973.717863][ C0] br_flood+0x13a/0x3d0 [ 973.722100][ C0] br_dev_xmit+0x98c/0x15a0 [ 973.726594][ C0] ? br_poll_controller+0x10/0x10 [ 973.732046][ C0] ? netif_skb_features+0x6c2/0xb90 [ 973.737229][ C0] ? netdev_set_sb_channel+0xe0/0xe0 [ 973.742498][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 973.748747][ C0] ? validate_xmit_xfrm+0x43c/0xf10 [ 973.753929][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.760170][ C0] dev_hard_start_xmit+0x1a3/0x9c0 [ 973.765277][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.771514][ C0] __dev_queue_xmit+0x2b15/0x3650 [ 973.776581][ C0] ? inet6_sendmsg+0x9e/0xe0 [ 973.781156][ C0] ? sock_sendmsg+0xd7/0x130 [ 973.785745][ C0] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 973.791020][ C0] ? ip6_fragment+0x1d8d/0x2560 [ 973.795857][ C0] ? __kasan_check_read+0x11/0x20 [ 973.801051][ C0] ? lock_downgrade+0x920/0x920 [ 973.806504][ C0] ? lock_acquire+0x190/0x410 [ 973.811159][ C0] ? ip6_fragment+0x1d8d/0x2560 [ 973.816087][ C0] dev_queue_xmit+0x18/0x20 [ 973.820657][ C0] ? dev_queue_xmit+0x18/0x20 [ 973.825318][ C0] ip6_finish_output2+0xf58/0x2520 [ 973.830678][ C0] ? ip6_forward_finish+0x530/0x530 [ 973.835862][ C0] ? memcpy+0x46/0x50 [ 973.839828][ C0] ? ip6_fraglist_prepare+0x4ad/0x6b0 [ 973.845184][ C0] ip6_fragment+0x1d8d/0x2560 [ 973.849928][ C0] ? ip6_fragment+0x1d8d/0x2560 [ 973.855110][ C0] ? ip6_forward_finish+0x530/0x530 [ 973.860286][ C0] ? ip6_forward+0x3760/0x3760 [ 973.865029][ C0] ? __lockdep_free_key_range+0x120/0x120 [ 973.871290][ C0] ? ip6_mtu+0x16f/0x460 [ 973.875553][ C0] __ip6_finish_output+0x577/0xa50 [ 973.880654][ C0] ip6_finish_output+0x38/0x1f0 [ 973.885497][ C0] ip6_output+0x235/0x7c0 [ 973.889811][ C0] ? ip6_finish_output+0x1f0/0x1f0 [ 973.894910][ C0] ? __ip6_finish_output+0xa50/0xa50 [ 973.900250][ C0] ? ip_reply_glue_bits+0xc0/0xc0 [ 973.905277][ C0] ip6_local_out+0xbb/0x184 [ 973.909852][ C0] ip6_send_skb+0xbb/0x300 [ 973.914299][ C0] udp_v6_send_skb.isra.0+0x839/0x14c0 [ 973.919745][ C0] udpv6_sendmsg+0x21dc/0x2990 [ 973.924587][ C0] ? __kasan_check_read+0x11/0x20 [ 973.929601][ C0] ? ip_reply_glue_bits+0xc0/0xc0 [ 973.934607][ C0] ? udp_v6_push_pending_frames+0x3b0/0x3b0 [ 973.940496][ C0] ? debug_smp_processor_id+0x3c/0x214 [ 973.945940][ C0] ? perf_trace_lock+0xeb/0x4c0 [ 973.950780][ C0] ? perf_trace_lock+0xeb/0x4c0 [ 973.955636][ C0] ? __lockdep_free_key_range+0x120/0x120 [ 973.961373][ C0] ? __lockdep_free_key_range+0x120/0x120 [ 973.967094][ C0] ? _raw_spin_unlock_bh+0x31/0x40 [ 973.972200][ C0] ? release_sock+0x156/0x1c0 [ 973.976873][ C0] ? inet_autobind+0x144/0x1a0 [ 973.981637][ C0] inet6_sendmsg+0x9e/0xe0 [ 973.986036][ C0] ? inet6_sendmsg+0x9e/0xe0 [ 973.990611][ C0] ? inet6_ioctl+0x1c0/0x1c0 [ 973.995182][ C0] sock_sendmsg+0xd7/0x130 [ 973.999581][ C0] ___sys_sendmsg+0x803/0x920 [ 974.004241][ C0] ? copy_msghdr_from_user+0x440/0x440 [ 974.009699][ C0] ? __fget+0xa3/0x560 [ 974.013751][ C0] ? __fget+0x384/0x560 [ 974.017895][ C0] ? __might_fault+0xfb/0x1e0 [ 974.022553][ C0] ? __fget_light+0x1a9/0x230 [ 974.027209][ C0] ? __fdget+0x1b/0x20 [ 974.031276][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 974.037497][ C0] __sys_sendmsg+0x105/0x1d0 [ 974.042068][ C0] ? __sys_sendmsg_sock+0xd0/0xd0 [ 974.047078][ C0] ? __ia32_sys_clock_gettime32+0x16d/0x240 [ 974.052952][ C0] ? __x64_sys_clock_gettime32+0x240/0x240 [ 974.058737][ C0] ? entry_SYSENTER_compat+0x68/0x7f [ 974.064004][ C0] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 974.069446][ C0] do_fast_syscall_32+0x27b/0xdb3 [ 974.074455][ C0] entry_SYSENTER_compat+0x70/0x7f [ 974.079547][ C0] RIP: 0023:0xf7f62a29 [ 974.083604][ C0] Code: b8 80 96 98 00 eb cc 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 974.103211][ C0] RSP: 002b:00000000f5d5e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 974.111607][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 974.119560][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 974.127536][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 974.135510][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 974.143459][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000