058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 07:59:38 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x280, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd85}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x53a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x931}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb07}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x807}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4008}, 0xc010) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r3 = gettid() tkill(r3, 0x1000000000013) sched_getscheduler(r3) 07:59:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:38 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000340)=0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0xfffffffe, 0x0, 0x0, 0x0, 0x3ff}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f00000001c0)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000040)=""/222) [ 1354.011980] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1354.038194] device macsec1 entered promiscuous mode [ 1354.041762] binder: 30361:30366 unknown command 0 [ 1354.044989] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready [ 1354.053782] binder: 30361:30366 ioctl c0306201 20000240 returned -22 [ 1354.075544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:38 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1354.216892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00feffffff0a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:38 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r3, 0xfffffff8}, 0x8) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) getsockname$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9d, 0x7ffffffff000, 0x0}) [ 1354.359171] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1354.437533] device macsec1 entered promiscuous mode [ 1354.463582] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready [ 1354.499993] binder: 30426:30431 unknown command 0 [ 1354.519752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1354.529150] binder: 30426:30431 ioctl c0306201 20000240 returned -22 [ 1354.642601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1354.673259] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1354.718608] device macsec1 entered promiscuous mode 07:59:39 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000200)=0x7, 0x4) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="2665daa00200baf80c66b84c50e98566efbafc0c66ed0f01df65360f01c9f2d8c7b8f20f8ed8bad004b8d78fef670f792a36f7fdbaf80c66b8996cca8166efbafc0cec", 0x43}], 0x1, 0x65, &(0x7f0000000140)=[@cstype3], 0x1) [ 1354.746713] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready [ 1354.818817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:39 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1355.036899] binder: 30522:30530 unknown command 0 [ 1355.041971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1355.074576] binder: 30522:30530 ioctl c0306201 20000240 returned -22 07:59:40 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x14}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:40 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:40 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000080)={0x2}) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x400, @dev={0xfe, 0x80, [], 0x3f}, 0xbe4, 0x1}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b630000000000000000000000000000000000000000000000000000000000000000000000fffffff40000000000000000000000000000000000000000000000000000000000000000000000a59ed5d616276132591b6f4e56d2936f62999ef20e6f83ccb115"], 0x0, 0x7ffffffff000, 0x0}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0xbd) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x20a080, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000001c0)={0x8, 0x2}) 07:59:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:40 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0xa3000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f00000001c0)={0x2}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/222) [ 1356.213769] binder: 30551:30555 unknown command 0 [ 1356.218842] binder: 30551:30555 ioctl c0306201 20000240 returned -22 [ 1356.239629] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 07:59:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1356.268295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) [ 1357.009295] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:42 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x392}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:42 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000340)=r1, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000040)=""/222) 07:59:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:42 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1002) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x8, 0x0, 0x36}, @flat=@binder={0x73622a85, 0xa, 0x3}, @flat=@binder={0x73622a85, 0x301, 0x3}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000140)) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x4, 0x9, 0x325, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x100e2, 0x1000, [], @p_u32=&(0x7f0000000040)=0x1}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r3}], 0x0, 0x7ffffffff000, 0x0}) [ 1358.411413] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b0001000000060005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1358.459719] binder: 30720:30725 ioctl c0205649 200000c0 returned -22 [ 1358.469539] nla_parse: 8 callbacks suppressed [ 1358.469546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:42 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='veth0_vlan\x00') clone(0x80080100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'gre0\x00', @dev={[], 0x37}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x7ffffffff000, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000005000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f00000002c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000b00}}]}]}}]}, 0x74}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@ipv4={[], [], @loopback}, @mcast2, @loopback, 0x9, 0x7ff, 0x1000, 0x400, 0x5, 0x2200140, r7}) [ 1358.605130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1358.628996] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1358.827928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1358.870094] device macsec1 entered promiscuous mode [ 1358.885013] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready [ 1358.905230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) [ 1359.087382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1359.131637] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1359.249294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1359.390012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:44 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x900}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:44 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:44 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/222) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000b00}}]}]}}]}, 0x74}}, 0x0) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r5}, 0x10) 07:59:44 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r2], 0x2}}, 0x4) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0xfffffffd, 0xffffffff, 0x2004, 0x0, 0x9, 0x3}}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(r1, 0x0, 0x3, &(0x7f0000000300)={@initdev, @empty}, &(0x7f0000000340)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000002c0)={0x2, 0x3, 0x7fff, 0x3, 'syz0\x00', 0x3}) syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0x40, 0x200002) [ 1360.229113] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1360.273727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:44 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:44 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000040)={0x16, 0x7, 0x20}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x100, 0x5ebf6286, 0x8], 0x4, 0x80000}) 07:59:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1360.385772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 07:59:44 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:usb_device_t:s0\x00', 0x22, 0x1) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1360.540447] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1360.661530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1360.686694] binder: 30987:30994 unknown command 0 [ 1360.705955] binder: 30987:30994 ioctl c0306201 20000240 returned -22 07:59:45 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1360.789136] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1360.875859] binder: 31033:31037 unknown command 0 [ 1360.883182] binder: 31033:31037 ioctl c0306201 20000240 returned -22 07:59:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:45 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xb66) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[@acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x2}, @free_buffer={0x40086303, r1}], 0x44, 0x7ffffffff000, 0x0}) 07:59:45 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x1400}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1361.197865] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:45 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\vc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'\x00'/76], 0x0, 0x7ffffffff000, 0x0}) 07:59:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:45 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:45 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="97ff080000000000000000000000000000000000000000000000000000000023000000000000000000000000578362a800"/76], 0x0, 0x7ffffffff000, 0x0}) 07:59:45 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xfdfffffffffffff7, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003}, 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x4c0f, 0x0, 0x0, 0x0, 0xfff}, &(0x7f0000000440)={0x0, 0x1c9c380}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000001c0)={0x5, 0x4c6db50c, 0x0, 0x1, 0x6}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000040)=""/222) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="b723f0080083000000800000000000000000", @ANYRES32=0x0, @ANYBLOB="e9bc953d89ffc601189cfb3d7e25aa4799f51ac5a2e419b360ac926c278ec078fe9300000080d43d3962cb458a3a62ee12746a11c1f8952ee3ee40837c0000000000387c80ea06436ff93aa2f837c19658de3a8436bb"], 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000065ec4e31bff5d31d3dddbfc03dbe60017f2ce065bedf199cd5273ee0a7ee3959b8c6922ed283", @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf2510000000050035003b00000008003b0000010000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) write$P9_RFSYNC(r1, &(0x7f0000000300)={0x7, 0x33, 0x1}, 0x7) [ 1361.516439] binder: 31145:31153 unknown command 589719 07:59:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b200"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:45 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000b00}}]}]}}]}, 0x74}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000140)) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000040)={0x40000000, 0x37c9367042425e8d, "8d7208c0be8cf1816750c1d392f7e9494d420ada6ab100b2815e735d4feeb9ed", 0x7fffffff, 0x3, 0xffffffff, 0x2, 0x1, 0x2, 0x5, 0x0, [0x6, 0xfffffff7, 0x0, 0x3]}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) [ 1361.542346] binder: 31145:31153 ioctl c0306201 20000240 returned -22 [ 1361.566604] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b200"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1361.813124] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:47 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x3f00}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:47 executing program 2: clone(0xa0001000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x7ffffffff000, 0x0}) 07:59:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b200"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:47 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1362.884059] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:47 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b63000000000000000000000000000000000000000000000000000000000000b57d00"/76], 0x0, 0x7ffffffff000, 0x0}) 07:59:47 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00010900000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:47 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = shmget$private(0x0, 0xb000, 0x80, &(0x7f0000ff2000/0xb000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 07:59:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b2000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1363.070884] binder: 31333:31339 unknown command 0 [ 1363.089685] binder: 31333:31339 ioctl c0306201 20000240 returned -22 07:59:47 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:48 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x4000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:48 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:48 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01634040010000000000000000000000000000000000000030000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a62730001000001000000000000000000000000000000852a62770010000003000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/142], @ANYBLOB="8e0000000000000001000000000000003b00000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000180000000000000030000001000000000f26c422694f05a450bc0d2c3e548aa60b76995b36db8ccae0f0da3c1e1bcd0b53586254"]], 0x0, 0x7ffffffff000, 0x0}) 07:59:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b2000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:48 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1364.307096] validate_nla: 2 callbacks suppressed [ 1364.307122] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:48 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@hyper}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f630c4000000000000000000000000007630440000000000f630c400000000000000000000000000463044003000000056304400200000001634040000000000000000000000000000000000000000031000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000070000000000000000000000000000001c000000000000008561646600000000060000000000000001000000000000001300000000000000"], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="00000001000000001800000000000200280000000000e07c5f210d7cb369e35eb0361b853b2e42dd0f3167e0ebebc75239ae6c0de1256c1692f3c3ce2a83d6da632a48d5c8924d176b9c6f4a32a18e178312e8b96620f594a76140c47c117bd44fdba9b6eea99f9edb5eba7adc137c756d60d65f26b975830bc2117158456a92e9dea977d8ac2182bf0260091284ac99d908d9cd5dacb896e8e2c5bc56e8de1267f33ea9a0e7c436e9"], @ANYBLOB="0f630c400100"/16], 0x0, 0x7ffffffff000, 0x0}) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000001c0)="5a90ce00dc145615050d7a9632a7310b3c96") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x2f1c9c31e9894096) [ 1364.399135] nla_parse: 13 callbacks suppressed [ 1364.399144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:48 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x6, "770b6efad40a606046e1c24ea367d7b104338c050e21672c7187b06d85bd073a", 0x3}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b6300000000000000080000000000000000000000000000000000000000000000000000de00000000000000000000000800000000000b47a340e143d43d4222f700"/87], 0x0, 0x7ffffffff000, 0x0}) 07:59:48 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1364.504114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1364.543815] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b2000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1364.577034] binder: 31492:31494 unknown command 0 [ 1364.613525] binder: 31496:31496 ioctl c0345641 20000080 returned -22 [ 1364.617332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1364.625548] binder: 31492:31494 ioctl c0306201 20000240 returned -22 07:59:48 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0163000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026c5"], 0x0, 0x7ffffffff000, 0x0}) socket$rxrpc(0x21, 0x2, 0x2) 07:59:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) [ 1364.740393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1364.798906] binder: 31546:31550 unknown command 25345 [ 1364.822468] binder: 31546:31550 ioctl c0306201 20000240 returned -22 [ 1364.847550] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:49 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:49 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000180)={0x5, 0x6, [{0x5, 0x0, 0x197}, {0xea, 0x0, 0x3}, {0x4, 0x0, 0x4}, {0x9, 0x0, 0x9}, {0x0, 0x0, 0xfab}]}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x10c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xf5ff3bbbde0fa83f, 0x7ffffffff000, 0x0}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) dup3(r2, r3, 0xd686e4c50859ddbf) 07:59:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b200000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:49 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x9203}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:49 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:49 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xffffffffffffffe3, 0x0, &(0x7f0000000040), 0x0, 0x7ffffffff000, 0x0}) 07:59:49 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1365.444653] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:49 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1365.505428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:49 executing program 4: r0 = socket(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1365.626969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:50 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) getsockname$l2tp(r4, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x5) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0xffff8000, 0x2, 0x4, 0x1, 0xffffff01, {}, {0x4, 0x8, 0x6, 0x8, 0xc1, 0x4, "0a21548d"}, 0x0, 0x2, @planes=&(0x7f0000000080)={0x4, 0x8, @mem_offset=0x7, 0x2}, 0x6eadbba2, 0x0, r1}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b630055844e4a132af8534213000000004000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000f1090000000000000000000000000000006a00000000"], 0x0, 0x7ffffffff000, 0x0}) 07:59:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b200000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1365.773321] binder: 31643:31646 ioctl 8933 20000040 returned -22 [ 1365.795593] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:50 executing program 4: r0 = socket(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1365.844349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:50 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) write$midi(r1, &(0x7f00000002c0)="5153b181cd700655a157a8644434846c9e52f363bff91a839cbad2ae40601f72592c759202e646038c0bc9fcee32a5940a8460eeb860aaf97559bee98b682124fbd8cb781254841190c0df830678dd84d93342ff64cf8ee9f39a924247bbbbf5fb541ccad8b5b909bf5934b5b3ef789ef2421f0aab5de406c4dfdf5211380deb2b505abf6e81949f51d4bd74f466e66282027a48ef5ba041", 0x98) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0200ee7e00ff01000000ff070000004c0000000000e60000000000000000000000000001040000000000000000000000010826ccf9cd082219ff625f000055aa4546492050415254a8d3e5f7fc", 0x4d, 0x1c0}]) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYBLOB="8154659f2d18066f9353b110ed345990fe721c879f0708e220e5510fc373ef8f43a523fac592264a60a6256fa03a0f6d398c5b01562c36f42faa34a2595d0c09aa388c75ee0eb1cf18f9b654edf0730a9a5a248ccb0d61804c2070cf8088781f9e8379265ca35612c725c7b0d71be9c53ca20d682100427461b768fcdd010cc78d33cddd4014ca9cd4472d3ed8a7b2fb9e798c9805c7fea08f5e52b5d5e8c19946f3880290b71b384173bf435bece86bf84206cf5afdcc528ca5258153e1260f265249fb353bd6a6a7e80c20176038c4db8b7e3bcc912beae79741de08882752ab746a864090722756adab", @ANYRES64=0x0], 0x3}, 0x1, 0x0, 0x0, 0x4c004}, 0x810) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000002c00270d0000000000000000000000009e9662c6037639e5674c51a1fe465496887a1b4137047b829a5ea971e66b19d121bc9bf6dcf04f2e3c2798f3b8d3305f8d78290912836686820da8755cd41893c7762379c24fb4e614c05db1ad", @ANYRES32=r6, @ANYBLOB="000000000000000000006a6b9a01000a030000007376703600000044000280010000000000000b0020000000000000000000000000100000000000000000000000000000000000a405cd4d94ccfb3100000000000000"], 0x3}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@remote, 0x3b, r6}) [ 1365.952714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b200000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1366.008022] binder: 31709:31714 unknown command 0 [ 1366.042041] binder: 31709:31714 ioctl c0306201 20000240 returned -22 [ 1366.094268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1366.181275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:51 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x1000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:51 executing program 4: r0 = socket(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:51 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b63000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000f4ffffff00"/76], 0x0, 0x7ffffffff000, 0x0}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000200)={0xa30000, 0xfffffffd, 0x917e, r0, 0x0, &(0x7f0000000100)={0x5a6d2b86644038c4, 0x400, [], @value64=0x4}}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000080)={0x0, 0x0, 0x401, 0x0, 0x1}) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x4e21, @broadcast}}) 07:59:51 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:51 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:51 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x7, 0x9, 0x4, 0x0, 0x0, {}, {0x1, 0xc, 0x3f, 0x1, 0x81, 0x7f, ']:^['}, 0xd9, 0x1, @offset=0x120, 0xd8e, 0x0, r0}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffc, 0xbd, 0x5, @buffer={0x0, 0xdd, &(0x7f0000000300)=""/221}, &(0x7f0000000400)="7f7373a516ce163747ede60865402f75478c9f7ffd9cca6a74e59f40d7e0a8e0669cff797dc9f5ed27e172fd0556b8b7c531c1e532dee975c6746dae32bd357c421005a53192e4889a1130acbdd8879d89e5a37947b66ec68d9ca25bdfa258d0efd5e633b7c143065da096fb7f74bb63c8a576890ff7c5af032d9ba106d9b517f92afcf6bea336f26ceb1db273e302f0cb17d2981f8f4884341298100ecf8bab3ed7e98aa0ca607d632e8ed8990eb550a57bf42f4ce3bb70d291f90dcb", &(0x7f0000000200), 0x20, 0x10000, 0x2, &(0x7f00000004c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ea4d31970000000000000000000000000000000000000000000000000000000000000000001800993a52ca00000000007f00"/70], 0x0, 0x7ffffffff000, 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4a4881, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000100)={@any, 0x0, 0x100, 0x8001}) [ 1367.107664] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1367.107704] binder: 31769:31775 unknown command 0 [ 1367.136771] binder: 31769:31775 ioctl c0306201 20000240 returned -22 07:59:51 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1367.240316] binder: 31797:31827 unknown command -1758376470 [ 1367.269896] binder: 31797:31827 ioctl c0306201 20000240 returned -22 [ 1367.331862] binder: 31797:31853 unknown command -1758376470 [ 1367.336664] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1367.358589] binder: 31797:31853 ioctl c0306201 20000240 returned -22 07:59:51 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1367.501394] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:52 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x8000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:52 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) membarrier(0x14, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b6310000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000001d0000000000000000000000000000000001000000"], 0x0, 0x7ffffffff000, 0x0}) sysfs$2(0x2, 0x401, &(0x7f0000000040)=""/208) 07:59:52 executing program 4: socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00014c00000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:52 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:53 executing program 4: socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1368.668743] binder: 31924:31933 unknown command 1073931 [ 1368.698345] binder: 31924:31933 ioctl c0306201 20000240 returned -22 07:59:53 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x740, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x5, 0x80}, {0x4, 0xcd}, 0x9, 0x4, 0x7f}) 07:59:53 executing program 4: socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1368.727180] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:53 executing program 2: clone(0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7805, 0x200080) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x9) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\vc\x00'/67], 0x0, 0x7ffffffff000, 0x0}) [ 1368.823377] binder: 31983:31985 unknown command 0 [ 1368.837143] binder: 31983:31985 ioctl c0306201 20000240 returned -22 [ 1368.851370] binder: 31986:31986 unknown command 0 [ 1368.864857] binder: 31986:31986 ioctl c0306201 20000240 returned -22 07:59:53 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 07:59:53 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x9000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:53 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) getpeername$netrom(r0, &(0x7f0000000040)={{0x3, @null}, [@default, @default, @default, @bcast, @netrom, @remote, @rose, @default]}, &(0x7f00000000c0)=0x48) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2080, 0x0) ioctl$int_out(r2, 0x5460, &(0x7f0000000200)) 07:59:53 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 07:59:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:53 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:54 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 07:59:54 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 1369.680612] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:54 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1369.742679] binder: 32060:32062 unknown command 0 [ 1369.747732] binder: 32060:32062 ioctl c0306201 20000240 returned -22 [ 1369.758232] nla_parse: 8 callbacks suppressed [ 1369.758239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1369.847547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1369.886585] binder: 32106:32110 unknown command 0 07:59:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:54 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1369.901952] binder: 32106:32110 ioctl c0306201 20000240 returned -22 [ 1369.929223] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1370.009313] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1370.024437] binder: 32122:32125 unknown command 0 [ 1370.035252] binder: 32122:32125 ioctl c0306201 20000240 returned -22 [ 1370.106237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:55 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x10000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:55 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 07:59:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00016800000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:55 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x7ffffffff000, 0x0}) 07:59:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:55 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:55 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) fcntl$setstatus(r0, 0x4, 0x6400) 07:59:55 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 07:59:55 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)="faa2ba5fb4d1ff6a921d6bceb9fa1910d7ef3e29f0c6d00093efb891226b4280f8f8d275ffe68b7a2386fd1f313403beb45042b57720b027989a77942cf348fff0e4c01d1b940dfedf440034d46192972395661177bc6e8492f7bb681246455d41e41beec8668f0fb0e609194e7fbca516496169ea944d7ddc79f46a9f44809520f39035cd95e33f7d5f8f3db71147271c99e289a89922b4967059f5fdaf46cebe04c2fb012a1e84c4db25090ccf83", 0xaf) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1370.788386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1370.820523] binder: 32186:32187 unknown command 0 [ 1370.825966] binder: 32186:32187 ioctl c0306201 20000240 returned -22 07:59:55 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 07:59:55 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 1370.970920] binder: 32201:32230 unknown command 0 [ 1370.978376] binder: 32201:32230 ioctl c0306201 20000240 returned -22 [ 1370.979728] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:55 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4b630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000307a86d1a5b8db8f94002202c9651d851e7a105a8e88db9015952aebc3620e01a98b869f42a8275620a70dfb83d6649fc76384ff8d08cba6df0ecae62be9b58be7fd025f40b90a019624ff"], 0x0, 0x7ffffffff000, 0x0}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000100)={0xaa, 0x2, 0x2, 0xffff, 0x3be}) [ 1371.062664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1371.139844] binder: 32248:32251 unknown command 25419 [ 1371.152954] binder: 32248:32251 ioctl c0306201 20000240 returned -22 [ 1371.163226] binder: 32252:32252 unknown command 25419 [ 1371.179841] binder: 32252:32252 ioctl c0306201 20000240 returned -22 07:59:56 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x14000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:59:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:56 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="477a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004002e583e97a815f4d9eb5155c6000000"], 0x0, 0x7ffffffff000, 0x0}) 07:59:56 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1372.148775] binder: 32272:32274 unknown command 31303 07:59:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 1372.172493] binder: 32272:32274 ioctl c0306201 20000240 returned -22 [ 1372.193257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:56 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="000000080000000000000000e7739b410f1c19acc1e301ad273c8ed600007d180891b8f4f84bb7b0c98239f8d194add1fc50505a0d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r3, 0x7}, &(0x7f0000000080)=0x8) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000f31900000000000000000000000000000000000000000000000000dddd74e97cfcf6d9b1bcbc65bade0357b5f7a2c68171d856d57084abc35c221139e67bfa6fa6"], 0x0, 0x7ffffffff000, 0x0}) [ 1372.315973] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1372.370654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00017000000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1372.532689] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1372.563604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1372.628901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:57 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x3f000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 07:59:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:57 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:57 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x504, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3f, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000840) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0010000000000000040000000a000100727376703600000044000200400005003c00010000000000000b002000000000000400"/92], 0x74}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000200)=r7) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1373.609008] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0xca0129d3b449dec3}, 0x14}}, 0x0) 07:59:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1373.762554] tc_dump_action: action bad kind [ 1373.772575] binder: 32402:32406 unknown command 0 [ 1373.781065] binder: 32402:32406 ioctl c0306201 20000240 returned -22 07:59:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:58 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b63000000000000ffff00000000000000008000000000000000000000000000000000000000000000000000000000000000000000257395a5923576a30000000000000000000400"], 0x0, 0x7ffffffff000, 0x0}) 07:59:58 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0xca0129d3b449dec3}, 0x14}}, 0x0) 07:59:58 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffff741b}) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000280)="b20ed6fc1479dcf01921a7058f2c67d8b1c0af3e86aa9eae29e884c5b97f53000eba75bb42dc2b793b76d60a688f5370845279356a7b1ccc67f103191b45af04d9ae80e0cbbb6bafbfafae464fb2342005953b7953cc753891bc1e103a49e0633c1ab91add315d693bc112df09b80adadc847027aaa27f193bb69c", 0x7b) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'hsr0\x00', {0x1}, 0x4}) [ 1373.930397] binder: 32469:32473 unknown command 0 [ 1373.938123] binder: 32469:32473 ioctl c0306201 20000240 returned -22 [ 1374.032790] tc_dump_action: action bad kind [ 1374.038426] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1374.086379] binder: 32505:32517 unknown command 0 [ 1374.107387] binder: 32505:32517 ioctl c0306201 20000240 returned -22 07:59:59 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x40000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 07:59:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0xca0129d3b449dec3}, 0x14}}, 0x0) 07:59:59 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x7ffffffff000, 0x0}) 07:59:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 07:59:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 07:59:59 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1374.982890] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 07:59:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x18, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 07:59:59 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x7ffffffff000, 0x0}) [ 1375.025740] tc_dump_action: action bad kind [ 1375.032554] nla_parse: 4 callbacks suppressed [ 1375.032562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 07:59:59 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 07:59:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1375.174257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1375.201033] tc_dump_action: action bad kind 07:59:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x18, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 07:59:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b0001f800000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1375.236724] binder: 32566:32600 unknown command 8203 [ 1375.253023] binder: 32566:32600 ioctl c0306201 20000240 returned -22 [ 1375.312816] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1375.342510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1375.426120] tc_dump_action: action bad kind [ 1375.435796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:00 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x92030000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:00 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = gettid() tkill(r1, 0x1000000000013) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/nf_conntrack_expect\x00') write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, {0x4, 0xf8, 0x1}}, 0xa) 08:00:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:00 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x18, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 08:00:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:00 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1376.397444] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1376.441085] binder: 32676:32684 unknown command 0 [ 1376.448638] binder: 32676:32684 ioctl c0306201 20000240 returned -22 [ 1376.458965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b0001ae01000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1376.528183] tc_dump_action: action bad kind [ 1376.537536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:00 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1376.654215] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:01 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1376.732952] tc_dump_action: action bad kind [ 1376.737685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:01 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1376.828973] tc_dump_action: action bad kind [ 1376.841856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1376.895211] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1376.924517] tc_dump_action: action bad kind 08:00:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x798e45b971ef9852, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0xa}}, 0x0, 0x3, 0xffffffffffffffff, 0xa) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2, 0x0, 0x0, 0x400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 08:00:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00014a02000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:03 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xf7) 08:00:03 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0xfeffffff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2210, 0x8002}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x8, 0x12) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xe2d0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xfe, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80100, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x10001, 0x0, 0x3, 0x41, 0x25}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf4, 0x0, @perf_config_ext, 0x402, 0x8001, 0x6, 0x0, 0x0, 0x36dc, 0x5}, 0x0, 0x4, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)=0xa02) close(r1) 08:00:03 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1379.408579] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1379.453605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:03 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1379.496927] binder: 354:359 unknown command 0 [ 1379.509192] binder: 354:359 ioctl c0306201 20000240 returned -22 [ 1379.614467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1379.644958] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:04 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000000000000000000002000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000b00}}]}]}}]}, 0x74}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000400)={0x0, @xdp={0x2c, 0x5, 0x0, 0xc}, @generic={0x9, "227490f7084de33146d65324d3bc"}, @can={0x1d, r3}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)='veth1_to_bond\x00', 0x400, 0x0, 0xfc01}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x931, 0x4}, &(0x7f0000000200)=0xc) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x3}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400580, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000280)) 08:00:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1379.852435] binder: 413:415 unknown command 0 08:00:04 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) [ 1379.905495] binder: 413:415 ioctl c0306201 20000240 returned -22 [ 1379.987914] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1380.084410] binder: 461:464 unknown command 0 08:00:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00017402000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1380.111017] binder: 461:464 ioctl c0306201 20000240 returned -22 [ 1380.123685] binder: 465:465 unknown command 0 [ 1380.128543] binder: 465:465 ioctl c0306201 20000240 returned -22 [ 1380.147359] nla_parse: 2 callbacks suppressed [ 1380.147368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:04 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:04 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001500)=[{&(0x7f0000000380)="8968038e3607dd8a8d4a3bef00368113308394c4e7d293ff978d0186bfe98d9de39ff46566c3491020b1dd7abf789214a87fedda6d82fbf041a3e47b7371da3f567c459286a69358315f8b902f5e146b9a805de156518d9083799c661074fe", 0x5f}, {&(0x7f0000000400)="5333d42982d6dff1325e0938afc6e4f9efb49d24691a3234f3cf138e372ac8e2886155ced21bcaa62be9c1d9e4bdcd27fea5c8332025a4f7cabd2e54cc9400cc11f9dcac7830a9af0a72f272292dd5b79685ff06f96bb22131c4a70f57da08e8f88067028fda1db23ab9b82147a0437c8cdd87bc7d826333d76d94e4b8b0acb5514d8d91c930b45eb0fa4bf80dad2de4743ccf3457c8ed8af6f2f024961e882340f56bcef30e3b754d2ad7cd0b12be966df11f434956e8", 0xb7}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="3d291d6b3e20b751e4cca4f245aadbef185a283aace41665351985a160b8e846c520f2503c32c62b4f989f99b953", 0x2e}], 0x4, 0x1) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x140f, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x2c}}, 0x10) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b6300ddffffff000000000000abef0000000000000000003702efe6eb000000000000000000000000000000f190c85d1e824199b391000000000000000200000000420d0a073221b86c000000000000000000bae55f08ce7107e806252b85cdf7b2a7f699368920a6d4a4d5c526d09e2905ecd4cb14535ea2715180fd3486e2b939fe27df5e968586a4bb47e954d0"], 0x0, 0x7ffffffff000, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='\x00') prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0xfffffffd, 0x4) [ 1380.263331] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1380.340799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1380.367129] binder: 508:525 unknown command -587177205 [ 1380.397266] binder: 508:525 ioctl c0306201 20000240 returned -22 [ 1380.426305] binder: 508:528 ioctl 6611 0 returned -22 [ 1381.110452] binder: 508:528 unknown command -587177205 [ 1381.116791] binder: 508:528 ioctl c0306201 20000240 returned -22 [ 1381.136567] binder: 508:517 ioctl 6611 0 returned -22 08:00:05 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0xffffff7f}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2210, 0x8002}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x8, 0x12) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xe2d0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xfe, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80100, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x10001, 0x0, 0x3, 0x41, 0x25}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf4, 0x0, @perf_config_ext, 0x402, 0x8001, 0x6, 0x0, 0x0, 0x36dc, 0x5}, 0x0, 0x4, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)=0xa02) close(r1) 08:00:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="00000000000000002800120009000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:05 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:05 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b6300000000000000000000000000000000000000000000000000000000000100"/76], 0x0, 0x7ffffffff000, 0x0}) pkey_alloc(0x0, 0x0) [ 1381.306948] binder: 543:546 unknown command 0 [ 1381.328160] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1381.338517] binder: 543:546 ioctl c0306201 20000240 returned -22 [ 1381.385974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1381.515181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="00000000000000002800120009000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1381.640777] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1381.745910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1382.015298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:06 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="00000000000000002800120009000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1382.169532] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2210, 0x8002}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x8, 0x12) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xe2d0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xfe, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80100, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x10001, 0x0, 0x3, 0x41, 0x25}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf4, 0x0, @perf_config_ext, 0x402, 0x8001, 0x6, 0x0, 0x0, 0x36dc, 0x5}, 0x0, 0x4, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)=0xa02) close(r1) [ 1382.259553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1382.371044] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:07 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0xfffffffe}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:07 executing program 2: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000a80)={0xa10, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x3df, 0x7f, 0x2, 0x7}, {0x1, 0x6f, 0x9, 0x7}, {0x7ff, 0x1, 0xf5, 0x2}, {0x2, 0x64, 0x5}, {0x7, 0x2, 0x86, 0x6}, {0x1, 0x0, 0x0, 0x7}, {0x8001, 0x8, 0x0, 0x9}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x9, 0x2, 0x40, 0x5}, {0xff, 0x8, 0x6, 0x5}, {0x0, 0x4, 0x0, 0x2}, {0x7, 0x80, 0xdc, 0x3}, {0x37, 0x4b, 0x4, 0x7fff}, {0xca8, 0x6, 0x3, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x0, 0x3, 0x4, 0xffffffff}, {0x1, 0x2, 0x5, 0x20}, {0x2, 0x3f, 0x3f, 0x9}, {0x7, 0x0, 0x8, 0x3}, {0x1, 0x7, 0x6, 0x8000}, {0xeb87, 0x7, 0x80, 0xffff}, {0x8, 0x1, 0x0, 0x9}, {0x3, 0x9, 0xff, 0xc1db}, {0x9f15, 0x9}, {0x1000, 0xfd, 0x5c, 0x9c}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfe44}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x800, 0x1, 0x21, 0xfffff212}, {0x6, 0x7, 0x40, 0x200}, {0x2, 0x0, 0x1, 0x3}, {0x8, 0x1, 0x32, 0xaea}, {0x2, 0xc4, 0x4}, {0x0, 0x3, 0x0, 0x80000001}, {0x400, 0xe, 0x1, 0x3ff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xf1a0}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x893}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xf2d2}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x401, 0x4, 0x4, 0xa5e}, {0x40d, 0x45, 0x1, 0xfffffffb}, {0x3, 0xc1, 0x1, 0xf1}, {0x4, 0x1, 0x81, 0x1}, {0x3ff, 0x3, 0xe1, 0x5}, {0x8, 0x8, 0x4, 0x10000}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x5, 0x7, 0x6, 0x8}, {0x8001, 0x6, 0x1f, 0x3}, {0x3, 0x7, 0x7f, 0x80}, {0x101, 0x0, 0x20}, {0x8, 0x6, 0x2, 0x8}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffc1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x20}}}]}}]}, 0xa10}, 0x1, 0x0, 0x0, 0x8805}, 0x4) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket$inet(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r2, 0x31905e13403123b7, 0x0, 0x0, {0xd, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x50000}, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000140)) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000280)=r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, r2, 0x508, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200008d5}, 0x20080831) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000140)) connect$llc(r7, &(0x7f0000000200)={0x1a, 0x110, 0x2, 0x8, 0x0, 0x2, @broadcast}, 0x10) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:07 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2210, 0x8002}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x8, 0x12) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xe2d0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xfe, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80100, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x10001, 0x0, 0x3, 0x41, 0x25}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf4, 0x0, @perf_config_ext, 0x402, 0x8001, 0x6, 0x0, 0x0, 0x36dc, 0x5}, 0x0, 0x4, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)=0xa02) close(r1) 08:00:07 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x36, 0x9, 0x400, 0x6, 0xffff, 0x10001, 0x1, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7995fa038a60670b6300"/66], 0x0, 0x7ffffffff000, 0x0}) [ 1383.293872] binder: 721:725 unknown command 0 [ 1383.304443] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1383.313890] binder: 721:725 ioctl c0306201 20000240 returned -22 08:00:07 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b6300000000000000000000000000000000000000000000cdbf00"/78], 0x0, 0x7ffffffff000, 0x0}) [ 1383.362493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1383.367695] binder: 736:741 unknown command 66753913 [ 1383.382705] binder: 736:741 ioctl c0306201 20000240 returned -22 [ 1383.454764] binder: 748:765 unknown command 0 08:00:07 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xc00, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf25150000000a0006000180c2000001000008000100020000000a00060000000000000000000a0006000180c2000003000008000100010000000a000600bbbbbbbbbbbb0000080001000300000008000300", @ANYRES32=r4, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1383.488093] binder: 748:765 ioctl c0306201 20000240 returned -22 [ 1383.521023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b0001a003000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x280041, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) socket$isdn(0x22, 0x3, 0x3) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b63000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ff000600"], 0x0, 0x7ffffffff000, 0x0}) [ 1383.685992] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1383.875597] binder: 802:806 unknown command 0 [ 1383.922992] binder: 802:806 ioctl c0306201 20000240 returned -22 08:00:09 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x1000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:09 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b63000000000000000000000000000000000000000000000000000000000000000000000000000000000000d4390b00efef03303053dab659508a330000000000000000000000000000000000000300"/92], 0x0, 0x7ffffffff000, 0x0}) 08:00:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b0001b003000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:09 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100013, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0x0) [ 1385.092182] audit: type=1804 audit(1586764809.397:217): pid=863 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir691272338/syzkaller.VdIYSg/1085/memory.events" dev="sda1" ino=17240 res=1 [ 1385.113098] binder: 862:866 unknown command 0 [ 1385.130829] binder: 862:866 ioctl c0306201 20000240 returned -22 08:00:09 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x7ffffffff000, 0x0}) [ 1385.138133] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:09 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xec7121f54f2af88a) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b6300000000000000000000000000000000000000000000000000000000000000a3720b010000000100"/76], 0x0, 0x7ffffffff000, 0x0}) [ 1385.192788] nla_parse: 2 callbacks suppressed [ 1385.192796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:09 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1385.257015] binder: 891:892 unknown command 0 [ 1385.268722] binder: 891:892 ioctl c0306201 20000240 returned -22 [ 1385.318963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:09 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000380)=@in={0x2, 0x4e22, @rand_addr=0x1f}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)="706a65c831e29f4b83b9f4dac80970ec85759e3a0783dad13972ddc261556d2e081ddca4cdd78c73da5596847ade98afe0feed999b30abe397083383e18a88cda564c9e18841308d5f50a55277990cf9d6a016a57d64c7de6c06a1ec344f7333d30b7a2fb40cd08eb8a444212f3e3bb2", 0x70}, {0x0}, {0x0}], 0x3}, 0x40000c4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0xff000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac141440e0", 0x0, 0x9}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x10845) [ 1385.423726] binder: 934:935 unknown command 0 [ 1385.455099] binder: 934:935 ioctl c0306201 20000240 returned -22 [ 1385.468649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1385.591901] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1385.655212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:10 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x100000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:10 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:10 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\vc\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00'/76], 0x0, 0x7ffffffff000, 0x0}) socket(0x9, 0x3, 0x7fc000) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4000, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xca2, r0, &(0x7f00000000c0), 0x0, 0x4, 0x0, 0x1, r3}, &(0x7f0000000180)) 08:00:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:10 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) 08:00:10 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b63000000006b7c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069d700"/78], 0x0, 0x7ffffffff000, 0x0}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x14200, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) [ 1386.477090] binder: 1003:1009 unknown command 0 [ 1386.484771] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1386.494132] binder: 1003:1009 ioctl c0306201 20000240 returned -22 [ 1386.537532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1386.565483] binder: 1021:1027 unknown command 2087387136 08:00:10 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b63000000000e0000000000000000000000000000000000000000000000000000002fc43e2e871fba79000000000000000000000000000000080000000000000000"], 0x0, 0x7ffffffff000, 0x0}) [ 1386.614732] binder: 1021:1027 ioctl c0306201 20000240 returned -22 [ 1386.670600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1386.707438] binder: 1070:1071 unknown command 917504 08:00:11 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x7ffffffff000, 0x0}) 08:00:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0400"/20]) r3 = perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x34, 0xfe, 0x0, 0x95, 0x0, 0x2, 0x1000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xffff, 0x101}, 0x20200, 0x6, 0x7f, 0x9, 0x6, 0x2, 0x1ff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x7fff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="214e017c6f76793a"], 0xda00) write$cgroup_subtree(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'], 0x1) write$cgroup_int(r4, &(0x7f0000000200)=0x43, 0x40001) 08:00:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1386.716177] binder: 1070:1071 ioctl c0306201 20000240 returned -22 08:00:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1386.827869] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1386.828940] binder: 1078:1083 unknown command 0 [ 1386.887207] binder: 1078:1083 ioctl c0306201 20000240 returned -22 [ 1386.920993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1387.072702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:12 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x800000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:12 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 08:00:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0400"/20]) r3 = perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x34, 0xfe, 0x0, 0x95, 0x0, 0x2, 0x1000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xffff, 0x101}, 0x20200, 0x6, 0x7f, 0x9, 0x6, 0x2, 0x1ff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x7fff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="214e017c6f76793a"], 0xda00) write$cgroup_subtree(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'], 0x1) write$cgroup_int(r4, &(0x7f0000000200)=0x43, 0x40001) 08:00:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:12 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1387.831650] binder: 1152:1158 unknown command 0 [ 1387.843537] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1387.845795] binder: 1152:1158 ioctl c0306201 20000240 returned -22 08:00:12 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000280)=""/239, &(0x7f0000000080)=0xef) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0xfffb, 0x20d, 0xe6a2, 0xffff, r1}, 0x10) getsockopt$inet_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000180)=""/87, &(0x7f0000000100)=0x57) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b6300000000000000000000002edb59231d9d0000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000005d020012b26560520000000000"], 0x0, 0x7ffffffff000, 0x0}) [ 1388.121574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 08:00:12 executing program 4: r0 = socket$kcm(0x2b, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc020662a, 0x770000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) [ 1388.203657] binder: 1189:1189 unknown command 0 [ 1388.215943] binder: 1189:1189 ioctl c0306201 20000240 returned -22 08:00:12 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3e9, 0x100, 0x70bd29, 0x25dfdbfd, {0x20, 0x1, 0x2, r3, 0xe4, 0x100, 0x6, 0x0, 0xd3}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x10004090}, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1388.318751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00010009000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:12 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1388.516190] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1388.549463] binder: 1245:1247 unknown command 0 [ 1388.563062] binder: 1248:1248 unknown command 0 [ 1388.577561] binder: 1245:1247 ioctl c0306201 20000240 returned -22 [ 1388.583671] binder: 1248:1248 ioctl c0306201 20000240 returned -22 [ 1388.673173] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:13 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x900000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:13 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf086dd1fffffff0e000000630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 08:00:13 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000180)={0xe1, 0x30, 0xbb2, {0x800, 0x9}, 0xfffffffb}) r1 = gettid() tkill(r1, 0x1000000000013) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x11, r3) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0726f640000000044002000000000000"], 0x0, 0x7ffffffff000, 0x0}) 08:00:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1389.667398] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffff9f) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x16, 0x1, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 08:00:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1389.794224] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1390.177158] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map={0x18, 0xa}]}, &(0x7f0000000100)='syzkaller\x00', 0xa378, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1}, 0x10, 0x0, r0}, 0x78) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002e0, 0x38, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f086dd1fffffe100008700ac141412e0000001c699da153f08a0e6e380f60108f683317585d7473f1cab4439f0", 0x0, 0x7ff, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1390.227258] nla_parse: 3 callbacks suppressed [ 1390.227268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1390.429737] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1390.527280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1390.602047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1390.622559] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:15 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x1000000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:15 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000005a008108040f9becdb4cb92e0a48b1372000000068bd6efb2503eaff0d000400400200ff050005001201", 0x2e}], 0x1}, 0x0) 08:00:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1391.013728] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1391.036663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1391.091366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:16 executing program 4: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:16 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:16 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x1400000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:16 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x3) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1392.672260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1392.735184] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1392.766787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1392.941248] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1392.991772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1393.103528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:17 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000100050601010000000000000000030000000910030073797a31000000002c3c7cffca74e58c895c8777a267bc2d178764f50ea4cb21487088131bd5a6b5b3c6816ce1911b37a848ac58cb0d6d37b32fc9a75f1bba4f9c"], 0x1}}, 0x4804) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="02002abd7000fddbdf25030000000b0001005e776c616e31000014000500ff02000000000000000000000000000108000c000000000008000800ac1414bb08000800e0000002"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0xc016) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x300, 0x0, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c040) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x453, 0x8, 0x70bd27, 0x25dfdbfc, "cf6c73b860ff6a5a23", [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1393.270447] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1393.299856] binder: 1675:1683 unknown command 0 [ 1393.323084] binder: 1675:1683 ioctl c0306201 20000240 returned -22 [ 1393.366089] audit: type=1804 audit(1586764817.667:218): pid=1683 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir132191340/syzkaller.PHMTvC/2209/bus" dev="sda1" ino=18433 res=1 08:00:17 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xe630c4000000000, 0x7ffffffff000, 0x0}) 08:00:17 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:17 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r2, 0x0, r4) keyctl$clear(0x7, r2) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) eventfd(0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b63000000000000000000000000000082a0b900000000000000002000"/76], 0x0, 0x7ffffffff000, 0x0}) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r5 = gettid() tkill(r5, 0x1000000000013) ptrace$setregset(0x4205, r5, 0x201, &(0x7f0000000080)={&(0x7f0000000280)="dba1dfad68e687028ac6b8bb68b2cddd975c1952a94f469a03792e2fe106bddc87099d05aeabdcf587d907c4a7999432ae7139d4b07a7ed0932c556968ee21e6c59ed3066da10fe513c6d45875b465db4f3969d8de153d361a5e4ddcd52efb3edc2f96ec8301d86ee07e9a64453c748162b389599c034b32c82273a6e4de4b782f8af2af6d288fda4dad67a789023ffaedbdd5c90064ee60c1e33cedf5717761a391ae480c2421f976c273492c15b08a2f193c7ae0faae9336db2bf5bee82556d7de858249665156c1b821b9b5c372", 0xcf}) [ 1393.485485] audit: type=1804 audit(1586764817.697:219): pid=1692 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir132191340/syzkaller.PHMTvC/2209/bus" dev="sda1" ino=18433 res=1 08:00:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1393.567823] binder: 1741:1742 unknown command 0 [ 1393.585062] binder: 1741:1742 ioctl c0306201 20000240 returned -22 [ 1393.718393] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:18 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x3f00000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:18 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xe630c4000000000, 0x7ffffffff000, 0x0}) 08:00:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:18 executing program 4: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1394.179449] binder: 1808:1811 unknown command 0 [ 1394.192811] binder: 1808:1811 ioctl c0306201 20000240 returned -22 [ 1394.202231] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:18 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1394.497214] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1394.748846] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:20 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b63000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001038a4da9709f2326efd765ebd48ef50d01fb8f28535"], 0x0, 0x7ffffffff000, 0x0}) 08:00:20 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:20 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) fcntl$setlease(r5, 0x400, 0x1) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/222) 08:00:20 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x4000000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) [ 1396.634967] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1396.666376] binder: 1947:1950 unknown command 0 08:00:21 executing program 2: clone(0xa00e2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x69, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b6300000000000000000000d40000000000000000000000000000000000560000000000000000000000000000000000000000000000002000edee2dd400000000000000c9f36224e6f9110d76fe1a708e1f63f4398b704fab576cc7f880e10b4e76e2356dd6a1e917"], 0x0, 0x7ffffffff000, 0x0}) [ 1396.680149] binder: 1947:1950 ioctl c0306201 20000240 returned -22 [ 1396.688409] nla_parse: 8 callbacks suppressed [ 1396.688418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1396.789281] binder: 1966:2001 unknown command 0 08:00:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00010048000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1396.837151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1396.860448] binder: 1966:2001 ioctl c0306201 20000240 returned -22 08:00:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:21 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x3a}, 0x2}}, [0x7, 0x9, 0x4dd, 0x0, 0xa422, 0x6, 0x98, 0x4, 0x81ac, 0x2, 0x3, 0x101, 0x3, 0x5, 0xff]}, &(0x7f00000000c0)=0x100) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x240102, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @local, 0xfffff151}, 0x1c) [ 1396.985526] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:21 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1397.055065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1397.129741] binder: 2049:2049 unknown command 0 [ 1397.147487] binder: 2049:2049 ioctl c0306201 20000240 returned -22 [ 1397.162104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:21 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x9f0000, 0x8, 0x401, r1, 0x0, &(0x7f0000000080)={0x9909df, 0x3, [], @p_u32=&(0x7f0000000040)=0x45}}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000100)) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1397.251337] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1397.361343] binder: 2083:2086 unknown command 0 08:00:21 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:21 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x7ffffffff000, 0x0}) [ 1397.393991] binder: 2083:2086 ioctl c0306201 20000240 returned -22 [ 1397.468763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1397.578316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1397.766547] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1397.793734] device macsec1 entered promiscuous mode [ 1397.809580] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready 08:00:22 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x9203000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:22 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:22 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:22 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0x0, 0x7ffffffff000, 0x0}) [ 1398.017796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1398.098413] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:22 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x80) [ 1398.157431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b0001004c000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:22 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:22 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:22 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000140)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x1}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000280)={[{0x4, 0x6, 0x3f, 0x1f, 0x7, 0x0, 0x2, 0xba, 0x3, 0x1f, 0x80, 0x6, 0x9}, {0x0, 0x3, 0x48, 0x22, 0x0, 0x1, 0x3f, 0x31, 0x1c, 0xff, 0x2, 0x2e, 0x2}, {0x46, 0x8, 0x5, 0x1, 0x2, 0x3, 0xf3, 0x9, 0x0, 0x4, 0x80, 0x0, 0x6}], 0x7f}) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000100)=0x40) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x2, @broadcast, 'veth1\x00'}}) [ 1398.348996] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1398.434812] binder: 2273:2276 unknown command 0 [ 1398.450181] binder: 2273:2276 ioctl c0306201 20000240 returned -22 [ 1398.494114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1398.618506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:23 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0xfeffffff00000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000001580)={0x2, @raw_data="731000b783f017e26c3b8d6c48c7acabcc4ef775bb6925f22d37ca38b5bd27cfec7038d33b8cd5db2d63c8bf132da7e8b277cf349d25e4b5498e32f73f560c8d9a17003a62ac41afe7308018f363b8b648055835e9cda0378136168fdc14e00b19912565362cac6a5851d167e748145840c51ca6e2dc6386ff43f361bafe1eb14f51ae9ad63b2b30eafedd8eef8b721c66c5a4a2151358a7983958dbad3a97eb66255e9301a0bbe5809b5f9945e0bdb904e26725c85c6099f0451503cb63106db1aee662765325dc"}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000040)=[@enter_looper, @request_death={0x400c630e, 0x2}, @exit_looper, @request_death={0x400c630e, 0x3}, @exit_looper], 0x0, 0x7ffffffff000, 0x0}) 08:00:23 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:23 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 1399.200043] binder: 2375:2392 unknown command 0 [ 1399.206479] binder: 2375:2392 ioctl c0306201 20000240 returned -22 [ 1399.213072] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:23 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f17", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1399.435127] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:23 executing program 4: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:23 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)={0x2000, 0x0, 0x3, 0x0, 0x2}) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000300)={0x2b}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x1, 0x0) renameat(r0, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0xc4, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff00}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf0b}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x7ffffffff000, 0x0}) 08:00:24 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0xffffff7f00000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:24 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:crack_db_t:s0\x00', 0x20, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f17", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:24 executing program 4: clone(0x76800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="356300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b0740ea696c0a11533612261c429229984e6f465e0b8c6e68017b03d6954c8912a045b98009785cc67a84c67c15617bb886fbb2ed8a3e55c6241741b8139cf6d05373099d5b2c9e59141be252fe57e3da08a5987b4b16b5b9511bdf10997c3331df7de4e0d9b9dce7efb57120452a5fc11aaa3658a05cf87fb16bf80b7270106d0a6cfc50ed44269df90bbc2e2dc675"], 0x0, 0x7ffffffff000, 0x0}) 08:00:24 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:24 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x400) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000002c0)={0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa30903, 0x6, [], @p_u8=&(0x7f0000000200)=0x7f}}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x36, 0x300, 0x70bd2a, 0x25dfdbfb, {0x15}, [@typed={0xc, 0x46, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1400.445223] binder: 2564:2569 unknown command 0 [ 1400.454697] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1400.458431] binder: 2564:2569 ioctl c0306201 20000240 returned -22 [ 1400.474310] IPVS: ftp: loaded support on port[0] = 21 [ 1400.504048] binder: 2566:2580 unknown command 25397 [ 1400.517846] binder: 2566:2580 ioctl c0306201 20000240 returned -22 [ 1400.611243] binder: 2583:2613 unknown command 0 [ 1400.627243] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f17", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1400.653684] binder: 2583:2613 ioctl c0306201 20000240 returned -22 08:00:25 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x7ffffffff000, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2) r4 = gettid() tkill(r4, 0x1000000000013) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000180)=0x1, 0x4) ptrace$cont(0x7, r4, 0x100000000, 0x3) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x1) 08:00:25 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1400.774402] binder: 2652:2654 unknown command 0 [ 1400.785018] binder: 2652:2654 ioctl c0306201 20000240 returned -22 08:00:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:25 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x8}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:25 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:25 executing program 4: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1401.734159] validate_nla: 1 callbacks suppressed [ 1401.734168] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1401.783016] nla_parse: 12 callbacks suppressed [ 1401.783024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1402.428202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:26 executing program 4: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1402.604799] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1403.084354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1403.410760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@loopback, @in6=@initdev}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\vc\x00'/76], 0x0, 0x7ffffffff000, 0x0}) 08:00:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(0x0, 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1403.838756] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1403.907738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1403.960415] binder: 2985:2994 unknown command 0 [ 1403.965369] binder: 2985:2994 ioctl c0306201 20000240 returned -22 [ 1404.006015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1404.062700] binder: 2985:3014 unknown command 0 [ 1404.067634] binder: 2985:3014 ioctl c0306201 20000240 returned -22 08:00:29 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x9}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(0x0, 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:29 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x60}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000010201080000000000000000000000000600074000000000240002800c00028005000100000000001400018008000100ac1414bb08000200ac141400"], 0x40}}, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:29 executing program 2: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1404.823593] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1404.850040] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1404.900621] device macsec1 entered promiscuous mode [ 1404.915042] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready 08:00:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(0x0, 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:30 executing program 2: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1405.946054] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1405.969863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1406.149799] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1406.700616] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1406.735571] device macsec1 entered promiscuous mode [ 1406.755200] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready 08:00:31 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x10}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1407.060148] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1407.089043] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1407.105891] device macsec1 entered promiscuous mode [ 1407.111764] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready [ 1407.127151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:31 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x9}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1407.230015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:31 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000}], 0x0, 0x7ffffffff000, 0x0}) 08:00:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:31 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000}], 0x0, 0x7ffffffff000, 0x0}) [ 1407.371809] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:31 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x68}], 0x0, 0x7ffffffff000, 0x0}) [ 1407.446166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1407.456845] binder: 3345:3346 unknown command 0 [ 1407.463940] binder: 3345:3346 ioctl c0306201 20000240 returned -22 [ 1407.574184] binder: 3379:3390 unknown command 0 [ 1407.581714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1407.602654] binder: 3379:3390 ioctl c0306201 20000240 returned -22 08:00:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:32 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:32 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x14}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1408.103016] binder: 3405:3408 unknown command 0 [ 1408.110447] binder: 3405:3408 ioctl c0306201 20000240 returned -22 [ 1408.124713] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1408.154183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) write$FUSE_POLL(r3, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x2, {0x3c41}}, 0x18) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="35630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000"], 0x0, 0x7ffffffff000, 0x0}) 08:00:32 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x6335, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x3, 0x3, 0x3feb}, 0x842, 0xc2}) [ 1408.256622] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:32 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x6335, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x3, 0x3, 0x3feb}, 0x842, 0xc2}) [ 1408.298063] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1408.304746] binder: 3478:3485 unknown command 25397 [ 1408.314377] binder: 3478:3485 ioctl c0306201 20000240 returned -22 08:00:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) write$FUSE_POLL(r3, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x2, {0x3c41}}, 0x18) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="35630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000"], 0x0, 0x7ffffffff000, 0x0}) [ 1408.351821] binder: 3488:3489 unknown command 25397 [ 1408.360253] binder: 3488:3489 ioctl c0306201 20000240 returned -22 [ 1408.381693] binder: 3493:3495 unknown command 25397 08:00:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:32 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x6335, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x3, 0x3, 0x3feb}, 0x842, 0xc2}) [ 1408.404527] binder: 3493:3495 ioctl c0306201 20000240 returned -22 08:00:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) [ 1408.460626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1408.497550] binder: 3501:3512 unknown command 25397 08:00:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) write$FUSE_POLL(r3, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x2, {0x3c41}}, 0x18) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="35630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000"], 0x0, 0x7ffffffff000, 0x0}) [ 1408.511563] binder: 3501:3512 ioctl c0306201 20000240 returned -22 [ 1408.531065] binder: 3516:3532 unknown command 25397 08:00:32 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000040)=""/222) [ 1408.571026] binder: 3516:3532 ioctl c0306201 20000240 returned -22 [ 1408.584106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1408.602815] binder: 3571:3572 unknown command 25397 [ 1408.613768] binder: 3571:3572 ioctl c0306201 20000240 returned -22 [ 1408.645474] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:33 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x392}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) write$FUSE_POLL(r3, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x2, {0x3c41}}, 0x18) syz_open_dev$binderN(0x0, 0x0, 0x0) 08:00:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:33 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000001c0)) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/222) 08:00:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) write$FUSE_POLL(r3, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x2, {0x3c41}}, 0x18) [ 1409.503555] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1409.537295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) [ 1409.632555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b000101ae000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 08:00:34 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1409.763898] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 08:00:35 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x900}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:00:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b000103b0000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:35 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/222) 08:00:35 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) [ 1411.051959] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) socket$l2tp6(0xa, 0x2, 0x73) 08:00:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b000103ba000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1411.288075] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) fallocate(r1, 0x0, 0x0, 0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:00:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:00:36 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x1400}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:00:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:36 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f0", 0x16}], 0x0, 0x0) [ 1412.491246] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:36 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/222) 08:00:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x140) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) [ 1412.625689] nla_parse: 4 callbacks suppressed [ 1412.625698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:37 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) [ 1412.783140] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1412.874675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:37 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) 08:00:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b000100f8000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1413.171275] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1413.316388] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1413.505154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:38 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:38 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) 08:00:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:38 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/222) 08:00:38 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x3f00}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:38 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x140) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) [ 1413.861072] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1413.898741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00010fff000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:38 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x140) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) [ 1413.976853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:38 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x140) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) [ 1414.086892] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1414.381152] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1414.527117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1414.555573] bond153 (uninitialized): Released all slaves [ 1414.615031] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:39 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:00:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1414.813359] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:39 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc630000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1414.963767] binder: 4248:4249 unknown command 0 [ 1414.968803] binder: 4248:4249 ioctl c0306201 20000240 returned -22 08:00:39 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x4000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:39 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) 08:00:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:39 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/222) 08:00:39 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) 08:00:39 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:39 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) [ 1415.596253] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1415.624975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:00:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) [ 1415.745629] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1415.765394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:00:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) [ 1415.832873] bond153 (uninitialized): Released all slaves 08:00:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) [ 1415.956257] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) 08:00:41 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x9203}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:41 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:41 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/222) [ 1417.396301] bond2 (uninitialized): Released all slaves 08:00:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) [ 1417.487536] bond153 (uninitialized): Released all slaves 08:00:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1417.780519] nla_parse: 7 callbacks suppressed [ 1417.780529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1417.844663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1417.885901] bond153 (uninitialized): Released all slaves [ 1417.913146] validate_nla: 2 callbacks suppressed [ 1417.913154] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1417.973062] device macsec1 entered promiscuous mode [ 1417.992862] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready [ 1418.026357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1418.118491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 08:00:43 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x1000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a001a000b00010000000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00010000003f0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:43 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x6335, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1418.867598] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1418.883358] binder: 4480:4483 unknown command 25397 [ 1418.888597] binder: 4480:4483 ioctl c0306201 20000240 returned -22 [ 1418.937871] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1418.968734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:43 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1418.991615] bond153 (uninitialized): Released all slaves 08:00:43 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x6335, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) [ 1419.032861] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1419.072553] device macsec1 entered promiscuous mode [ 1419.101104] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready [ 1419.132662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1419.148736] binder: 4524:4527 unknown command 25397 [ 1419.164628] binder: 4524:4527 ioctl c0306201 20000240 returned -22 08:00:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1419.209510] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 08:00:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1419.411216] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1419.484481] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1419.499974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1419.530815] bond153 (uninitialized): Released all slaves 08:00:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:44 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x8000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:44 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:44 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 08:00:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:45 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1420.983336] binder: 4734:4737 unknown command 0 [ 1420.988558] binder: 4734:4737 ioctl c0306201 20000240 returned -22 08:00:45 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000}, 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:45 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 08:00:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:46 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x9000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:46 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:46 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0xb630000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:46 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 08:00:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1422.236180] binder: 4841:4853 unknown command 0 [ 1422.241355] binder: 4841:4853 ioctl c0306201 20000240 returned -22 08:00:46 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x630b, {0x0, 0xb630000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7ffffffff000, 0x0}) 08:00:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1422.515615] binder: 4910:4916 unknown command 0 08:00:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:46 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) [ 1422.562444] binder: 4910:4916 ioctl c0306201 20000240 returned -22 08:00:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1422.861137] nla_parse: 19 callbacks suppressed [ 1422.861147] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1422.901640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:48 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x10000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:00:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:48 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) 08:00:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:48 executing program 4 (fault-call:1 fault-nth:0): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1423.886836] FAULT_INJECTION: forcing a failure. [ 1423.886836] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.910715] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1423.917306] CPU: 0 PID: 5007 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 1423.927140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.936503] Call Trace: [ 1423.939118] dump_stack+0x188/0x20d [ 1423.942778] should_fail.cold+0xa/0x1b [ 1423.946680] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1423.951810] __should_failslab+0x115/0x180 [ 1423.956067] should_failslab+0x5/0xf [ 1423.959787] kmem_cache_alloc_node+0x260/0x730 [ 1423.964406] __alloc_skb+0xba/0x5b0 [ 1423.968053] ? skb_trim+0x180/0x180 [ 1423.971704] ? netlink_autobind.isra.0+0x217/0x300 [ 1423.976654] netlink_sendmsg+0x8d6/0xcd0 [ 1423.980760] ? netlink_unicast+0x6a0/0x6a0 [ 1423.985005] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1423.990217] ? netlink_unicast+0x6a0/0x6a0 [ 1423.994462] sock_sendmsg+0xcf/0x120 [ 1423.998193] ___sys_sendmsg+0x803/0x920 [ 1424.002186] ? copy_msghdr_from_user+0x410/0x410 [ 1424.006966] ? __fget+0x319/0x510 [ 1424.010445] ? lock_downgrade+0x740/0x740 [ 1424.014619] ? check_preemption_disabled+0x41/0x280 [ 1424.018926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1424.019654] ? __fget+0x340/0x510 [ 1424.019674] ? iterate_fd+0x350/0x350 [ 1424.019692] ? vfs_write+0x2e6/0x550 [ 1424.019711] ? __fget_light+0x1d1/0x230 [ 1424.019733] __sys_sendmsg+0xec/0x1b0 [ 1424.019747] ? __ia32_sys_shutdown+0x70/0x70 [ 1424.019765] ? vfs_write+0x15b/0x550 [ 1424.055081] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1424.059849] ? trace_hardirqs_off_caller+0x55/0x210 [ 1424.064885] ? do_syscall_64+0x21/0x620 [ 1424.068882] do_syscall_64+0xf9/0x620 [ 1424.072699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1424.077897] RIP: 0033:0x45c889 [ 1424.081121] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1424.100031] RSP: 002b:00007f23e43cdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1424.107749] RAX: ffffffffffffffda RBX: 00007f23e43ce6d4 RCX: 000000000045c889 [ 1424.115031] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1424.122314] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1424.129592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 08:00:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2, &(0x7f0000000100)) 08:00:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1424.136868] R13: 00000000000009ff R14: 00000000004ccbb5 R15: 0000000000000000 [ 1424.138503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x1267, &(0x7f0000000100)) 08:00:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1424.242712] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 08:00:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:48 executing program 4 (fault-call:1 fault-nth:1): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1424.379352] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1424.436204] FAULT_INJECTION: forcing a failure. [ 1424.436204] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.467650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1424.476555] CPU: 0 PID: 5091 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 1424.484370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.493736] Call Trace: [ 1424.496348] dump_stack+0x188/0x20d [ 1424.500010] should_fail.cold+0xa/0x1b [ 1424.503927] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1424.509065] __should_failslab+0x115/0x180 [ 1424.513316] should_failslab+0x5/0xf [ 1424.517048] kmem_cache_alloc_node_trace+0x272/0x750 [ 1424.522176] __kmalloc_node_track_caller+0x38/0x70 [ 1424.527127] __kmalloc_reserve.isra.0+0x39/0xe0 [ 1424.531815] __alloc_skb+0xef/0x5b0 [ 1424.535459] ? skb_trim+0x180/0x180 [ 1424.539105] ? netlink_autobind.isra.0+0x217/0x300 [ 1424.544053] netlink_sendmsg+0x8d6/0xcd0 [ 1424.548135] ? netlink_unicast+0x6a0/0x6a0 [ 1424.552382] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1424.557595] ? netlink_unicast+0x6a0/0x6a0 [ 1424.561842] sock_sendmsg+0xcf/0x120 [ 1424.565574] ___sys_sendmsg+0x803/0x920 [ 1424.569594] ? copy_msghdr_from_user+0x410/0x410 [ 1424.574369] ? __fget+0x319/0x510 [ 1424.577848] ? lock_downgrade+0x740/0x740 [ 1424.582015] ? check_preemption_disabled+0x41/0x280 [ 1424.587049] ? __fget+0x340/0x510 [ 1424.590526] ? iterate_fd+0x350/0x350 [ 1424.594423] ? vfs_write+0x2e6/0x550 [ 1424.598178] ? __fget_light+0x1d1/0x230 [ 1424.602174] __sys_sendmsg+0xec/0x1b0 [ 1424.605993] ? __ia32_sys_shutdown+0x70/0x70 [ 1424.610421] ? vfs_write+0x15b/0x550 [ 1424.614160] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1424.618932] ? trace_hardirqs_off_caller+0x55/0x210 [ 1424.623963] ? do_syscall_64+0x21/0x620 [ 1424.627970] do_syscall_64+0xf9/0x620 [ 1424.631792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1424.636995] RIP: 0033:0x45c889 [ 1424.640207] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1424.659121] RSP: 002b:00007f23e43cdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1424.666839] RAX: ffffffffffffffda RBX: 00007f23e43ce6d4 RCX: 000000000045c889 [ 1424.674121] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1424.681404] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1424.688681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1424.696048] R13: 00000000000009ff R14: 00000000004ccbb5 R15: 0000000000000001 [ 1424.824491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:49 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x14000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x1274, &(0x7f0000000100)) 08:00:49 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) 08:00:49 executing program 4 (fault-call:1 fault-nth:2): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00010003000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x1275, &(0x7f0000000100)) [ 1425.315703] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1425.387825] FAULT_INJECTION: forcing a failure. [ 1425.387825] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.402588] CPU: 0 PID: 5186 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 1425.410403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.419776] Call Trace: [ 1425.422380] dump_stack+0x188/0x20d [ 1425.426028] should_fail.cold+0xa/0x1b [ 1425.429936] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1425.435049] ? __lock_is_held+0xad/0x140 [ 1425.439136] __should_failslab+0x115/0x180 [ 1425.443390] should_failslab+0x5/0xf [ 1425.447119] kmem_cache_alloc_node+0x260/0x730 [ 1425.451745] ? mutex_trylock+0x1a0/0x1a0 [ 1425.455822] ? lock_downgrade+0x740/0x740 [ 1425.460000] __alloc_skb+0xba/0x5b0 [ 1425.463643] ? skb_trim+0x180/0x180 [ 1425.467294] ? __mutex_unlock_slowpath+0xea/0x670 [ 1425.472165] netlink_dump+0x5a5/0xb50 [ 1425.475991] __netlink_dump_start+0x4e9/0x6f0 [ 1425.480528] rtnetlink_rcv_msg+0x71e/0xaf0 [ 1425.484924] ? tcf_action_net_init+0x250/0x250 [ 1425.489544] ? rtnetlink_put_metrics+0x520/0x520 [ 1425.494315] ? tcf_action_net_init+0x250/0x250 [ 1425.498917] ? perf_trace_lock+0x4c0/0x4c0 [ 1425.503168] ? find_held_lock+0x2d/0x110 [ 1425.507248] netlink_rcv_skb+0x160/0x410 [ 1425.511323] ? rtnetlink_put_metrics+0x520/0x520 [ 1425.516122] ? netlink_ack+0xa60/0xa60 [ 1425.520045] netlink_unicast+0x4d7/0x6a0 [ 1425.524134] ? netlink_attachskb+0x710/0x710 [ 1425.528589] netlink_sendmsg+0x80b/0xcd0 [ 1425.532674] ? netlink_unicast+0x6a0/0x6a0 [ 1425.536917] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1425.542128] ? netlink_unicast+0x6a0/0x6a0 [ 1425.546428] sock_sendmsg+0xcf/0x120 [ 1425.550165] ___sys_sendmsg+0x803/0x920 [ 1425.554154] ? copy_msghdr_from_user+0x410/0x410 [ 1425.558930] ? __fget+0x319/0x510 [ 1425.562406] ? lock_downgrade+0x740/0x740 [ 1425.566674] ? check_preemption_disabled+0x41/0x280 [ 1425.571710] ? __fget+0x340/0x510 [ 1425.575182] ? iterate_fd+0x350/0x350 [ 1425.579000] ? vfs_write+0x2e6/0x550 [ 1425.582737] ? __fget_light+0x1d1/0x230 [ 1425.586733] __sys_sendmsg+0xec/0x1b0 [ 1425.590549] ? __ia32_sys_shutdown+0x70/0x70 [ 1425.594978] ? vfs_write+0x15b/0x550 [ 1425.598722] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1425.603488] ? trace_hardirqs_off_caller+0x55/0x210 [ 1425.608508] ? do_syscall_64+0x21/0x620 [ 1425.612489] do_syscall_64+0xf9/0x620 [ 1425.616306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1425.621504] RIP: 0033:0x45c889 [ 1425.624713] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1425.643621] RSP: 002b:00007f23e43cdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1425.651331] RAX: ffffffffffffffda RBX: 00007f23e43ce6d4 RCX: 000000000045c889 [ 1425.658604] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1425.665877] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1425.673153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1425.680437] R13: 00000000000009ff R14: 00000000004ccbb5 R15: 0000000000000002 08:00:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x1276, &(0x7f0000000100)) [ 1425.693023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:50 executing program 4 (fault-call:1 fault-nth:3): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2201, &(0x7f0000000100)) [ 1425.834038] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1425.922359] FAULT_INJECTION: forcing a failure. [ 1425.922359] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.952033] CPU: 0 PID: 5267 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 1425.959853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.969219] Call Trace: [ 1425.971848] dump_stack+0x188/0x20d [ 1425.975546] should_fail.cold+0xa/0x1b [ 1425.979468] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1425.984585] ? __lock_is_held+0xad/0x140 [ 1425.988675] __should_failslab+0x115/0x180 [ 1425.992932] should_failslab+0x5/0xf [ 1425.996656] kmem_cache_alloc_node_trace+0x272/0x750 [ 1426.001780] __kmalloc_node_track_caller+0x38/0x70 [ 1426.006729] __kmalloc_reserve.isra.0+0x39/0xe0 [ 1426.011416] __alloc_skb+0xef/0x5b0 [ 1426.015061] ? skb_trim+0x180/0x180 [ 1426.018706] ? __mutex_unlock_slowpath+0xea/0x670 [ 1426.023575] netlink_dump+0x5a5/0xb50 [ 1426.027430] __netlink_dump_start+0x4e9/0x6f0 [ 1426.031956] rtnetlink_rcv_msg+0x71e/0xaf0 [ 1426.036205] ? tcf_action_net_init+0x250/0x250 [ 1426.040809] ? rtnetlink_put_metrics+0x520/0x520 [ 1426.045580] ? tcf_action_net_init+0x250/0x250 [ 1426.050175] ? perf_trace_lock+0x4c0/0x4c0 [ 1426.054420] ? find_held_lock+0x2d/0x110 [ 1426.058512] netlink_rcv_skb+0x160/0x410 [ 1426.062593] ? rtnetlink_put_metrics+0x520/0x520 [ 1426.067370] ? netlink_ack+0xa60/0xa60 [ 1426.071284] netlink_unicast+0x4d7/0x6a0 [ 1426.075362] ? netlink_attachskb+0x710/0x710 [ 1426.079796] netlink_sendmsg+0x80b/0xcd0 [ 1426.083879] ? netlink_unicast+0x6a0/0x6a0 [ 1426.088122] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1426.093338] ? netlink_unicast+0x6a0/0x6a0 [ 1426.097587] sock_sendmsg+0xcf/0x120 [ 1426.101317] ___sys_sendmsg+0x803/0x920 [ 1426.105309] ? copy_msghdr_from_user+0x410/0x410 [ 1426.110084] ? __fget+0x319/0x510 [ 1426.113556] ? lock_downgrade+0x740/0x740 [ 1426.117721] ? check_preemption_disabled+0x41/0x280 [ 1426.122754] ? __fget+0x340/0x510 [ 1426.126222] ? iterate_fd+0x350/0x350 [ 1426.130041] ? vfs_write+0x2e6/0x550 [ 1426.133771] ? __fget_light+0x1d1/0x230 [ 1426.137767] __sys_sendmsg+0xec/0x1b0 [ 1426.141581] ? __ia32_sys_shutdown+0x70/0x70 [ 1426.145996] ? vfs_write+0x15b/0x550 [ 1426.149738] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1426.154506] ? trace_hardirqs_off_caller+0x55/0x210 [ 1426.159534] ? do_syscall_64+0x21/0x620 [ 1426.163518] do_syscall_64+0xf9/0x620 [ 1426.167337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1426.172535] RIP: 0033:0x45c889 [ 1426.175734] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1426.194645] RSP: 002b:00007f23e43cdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.202360] RAX: ffffffffffffffda RBX: 00007f23e43ce6d4 RCX: 000000000045c889 [ 1426.209634] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 08:00:50 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1426.216914] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1426.224194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1426.231483] R13: 00000000000009ff R14: 00000000004ccbb5 R15: 0000000000000003 [ 1426.287734] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:50 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x3f000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2202, &(0x7f0000000100)) 08:00:50 executing program 4 (fault-call:1 fault-nth:4): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) [ 1426.747743] FAULT_INJECTION: forcing a failure. [ 1426.747743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1426.759603] CPU: 1 PID: 5310 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 1426.767400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.776776] Call Trace: [ 1426.779385] dump_stack+0x188/0x20d [ 1426.783039] should_fail.cold+0xa/0x1b [ 1426.786951] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1426.792098] ? mark_held_locks+0xf0/0xf0 [ 1426.796187] __alloc_pages_nodemask+0x1c7/0x6a0 [ 1426.800877] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 1426.805922] ? fs_reclaim_acquire+0x10/0x10 [ 1426.810260] ? should_fail+0x142/0x7bc [ 1426.814169] cache_grow_begin+0x8e/0x8a0 [ 1426.818267] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1426.823057] kmem_cache_alloc_node_trace+0x67d/0x750 [ 1426.828191] __kmalloc_node_track_caller+0x38/0x70 [ 1426.833141] __kmalloc_reserve.isra.0+0x39/0xe0 [ 1426.837835] __alloc_skb+0xef/0x5b0 [ 1426.841483] ? skb_trim+0x180/0x180 [ 1426.845128] ? __mutex_unlock_slowpath+0xea/0x670 [ 1426.849987] ? lock_downgrade+0x740/0x740 [ 1426.854157] netlink_dump+0x5a5/0xb50 [ 1426.857982] __netlink_dump_start+0x4e9/0x6f0 [ 1426.862500] rtnetlink_rcv_msg+0x71e/0xaf0 [ 1426.866775] ? tcf_action_net_init+0x250/0x250 [ 1426.871375] ? rtnetlink_put_metrics+0x520/0x520 [ 1426.876148] ? tcf_action_net_init+0x250/0x250 [ 1426.880743] ? perf_trace_lock+0x4c0/0x4c0 [ 1426.885004] ? find_held_lock+0x2d/0x110 [ 1426.889090] netlink_rcv_skb+0x160/0x410 [ 1426.893164] ? rtnetlink_put_metrics+0x520/0x520 [ 1426.897932] ? netlink_ack+0xa60/0xa60 [ 1426.901847] netlink_unicast+0x4d7/0x6a0 [ 1426.905927] ? netlink_attachskb+0x710/0x710 [ 1426.910368] netlink_sendmsg+0x80b/0xcd0 [ 1426.914455] ? netlink_unicast+0x6a0/0x6a0 [ 1426.918709] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1426.923921] ? netlink_unicast+0x6a0/0x6a0 [ 1426.928194] sock_sendmsg+0xcf/0x120 [ 1426.931926] ___sys_sendmsg+0x803/0x920 [ 1426.935914] ? copy_msghdr_from_user+0x410/0x410 [ 1426.940678] ? __fget+0x319/0x510 [ 1426.944146] ? lock_downgrade+0x740/0x740 [ 1426.948342] ? check_preemption_disabled+0x41/0x280 [ 1426.953380] ? __fget+0x340/0x510 [ 1426.956852] ? iterate_fd+0x350/0x350 [ 1426.960668] ? vfs_write+0x2e6/0x550 [ 1426.964400] ? __fget_light+0x1d1/0x230 [ 1426.968396] __sys_sendmsg+0xec/0x1b0 [ 1426.972209] ? __ia32_sys_shutdown+0x70/0x70 [ 1426.976632] ? vfs_write+0x15b/0x550 [ 1426.980367] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1426.985134] ? trace_hardirqs_off_caller+0x55/0x210 [ 1426.990163] ? do_syscall_64+0x21/0x620 [ 1426.994158] do_syscall_64+0xf9/0x620 [ 1426.997977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1427.003176] RIP: 0033:0x45c889 [ 1427.006406] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1427.025320] RSP: 002b:00007f23e43cdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.033035] RAX: ffffffffffffffda RBX: 00007f23e43ce6d4 RCX: 000000000045c889 [ 1427.040334] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 08:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2203, &(0x7f0000000100)) 08:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, &(0x7f0000000100)) 08:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2270, &(0x7f0000000100)) 08:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2271, &(0x7f0000000100)) 08:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2272, &(0x7f0000000100)) 08:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2275, &(0x7f0000000100)) [ 1427.047614] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1427.054898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1427.062186] R13: 00000000000009ff R14: 00000000004ccbb5 R15: 0000000000000004 08:00:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2276, &(0x7f0000000100)) [ 1427.176599] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1427.387655] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:52 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x40000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:52 executing program 1 (fault-call:16 fault-nth:0): syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2279, &(0x7f0000000100)) 08:00:52 executing program 4 (fault-call:1 fault-nth:5): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227a, &(0x7f0000000100)) [ 1428.141288] nla_parse: 1 callbacks suppressed [ 1428.141297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1428.218589] FAULT_INJECTION: forcing a failure. [ 1428.218589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1428.230415] CPU: 0 PID: 5413 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 1428.238225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.247580] Call Trace: [ 1428.250188] dump_stack+0x188/0x20d [ 1428.253833] should_fail.cold+0xa/0x1b [ 1428.257738] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1428.262879] ? mark_held_locks+0xf0/0xf0 [ 1428.266947] ? check_preemption_disabled+0x41/0x280 [ 1428.271986] __alloc_pages_nodemask+0x1c7/0x6a0 [ 1428.276695] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 1428.281743] cache_grow_begin+0x8e/0x8a0 [ 1428.285835] ____cache_alloc_node+0x16d/0x1d0 [ 1428.290359] ? check_preemption_disabled+0x41/0x280 [ 1428.295391] kmem_cache_alloc_node_trace+0xf2/0x750 [ 1428.300446] __kmalloc_node_track_caller+0x38/0x70 [ 1428.305426] __kmalloc_reserve.isra.0+0x39/0xe0 [ 1428.310156] __alloc_skb+0xef/0x5b0 [ 1428.313801] ? skb_trim+0x180/0x180 [ 1428.317455] ? __mutex_unlock_slowpath+0x2d6/0x670 [ 1428.322411] netlink_dump+0x5a5/0xb50 [ 1428.326237] __netlink_dump_start+0x4e9/0x6f0 [ 1428.330753] rtnetlink_rcv_msg+0x71e/0xaf0 [ 1428.335002] ? tcf_action_net_init+0x250/0x250 [ 1428.339602] ? rtnetlink_put_metrics+0x520/0x520 [ 1428.344369] ? tcf_action_net_init+0x250/0x250 [ 1428.348965] ? perf_trace_lock+0x4c0/0x4c0 [ 1428.353236] ? find_held_lock+0x2d/0x110 [ 1428.357319] netlink_rcv_skb+0x160/0x410 [ 1428.361393] ? rtnetlink_put_metrics+0x520/0x520 [ 1428.366165] ? netlink_ack+0xa60/0xa60 [ 1428.370120] netlink_unicast+0x4d7/0x6a0 [ 1428.374213] ? netlink_attachskb+0x710/0x710 [ 1428.378648] netlink_sendmsg+0x80b/0xcd0 [ 1428.382736] ? netlink_unicast+0x6a0/0x6a0 [ 1428.386980] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1428.392216] ? netlink_unicast+0x6a0/0x6a0 [ 1428.396458] sock_sendmsg+0xcf/0x120 [ 1428.400178] ___sys_sendmsg+0x803/0x920 [ 1428.404166] ? copy_msghdr_from_user+0x410/0x410 [ 1428.408943] ? __fget+0x319/0x510 [ 1428.412431] ? lock_downgrade+0x740/0x740 [ 1428.416598] ? check_preemption_disabled+0x41/0x280 [ 1428.421632] ? __fget+0x340/0x510 [ 1428.425101] ? iterate_fd+0x350/0x350 [ 1428.428913] ? vfs_write+0x2e6/0x550 [ 1428.432646] ? __fget_light+0x1d1/0x230 [ 1428.436633] __sys_sendmsg+0xec/0x1b0 [ 1428.440466] ? __ia32_sys_shutdown+0x70/0x70 [ 1428.444895] ? vfs_write+0x15b/0x550 [ 1428.448625] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1428.453387] ? trace_hardirqs_off_caller+0x55/0x210 [ 1428.458434] ? do_syscall_64+0x21/0x620 [ 1428.462422] do_syscall_64+0xf9/0x620 [ 1428.466347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1428.471546] RIP: 0033:0x45c889 [ 1428.474765] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1428.493670] RSP: 002b:00007f23e43cdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1428.501388] RAX: ffffffffffffffda RBX: 00007f23e43ce6d4 RCX: 000000000045c889 [ 1428.508660] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 08:00:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227b, &(0x7f0000000100)) [ 1428.515939] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1428.523222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1428.530505] R13: 00000000000009ff R14: 00000000004ccbb5 R15: 0000000000000005 [ 1428.601572] FAULT_INJECTION: forcing a failure. [ 1428.601572] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.618448] CPU: 0 PID: 5472 Comm: syz-executor.1 Not tainted 4.19.114-syzkaller #0 [ 1428.626265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.635634] Call Trace: [ 1428.638241] dump_stack+0x188/0x20d [ 1428.641885] should_fail.cold+0xa/0x1b [ 1428.645782] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1428.650901] __should_failslab+0x115/0x180 [ 1428.655139] should_failslab+0x5/0xf [ 1428.658880] kmem_cache_alloc+0x29f/0x710 [ 1428.663031] ? selinux_is_enabled+0x3f/0x60 [ 1428.667356] ? creds_are_invalid+0x53/0x140 [ 1428.671685] ? __validate_process_creds+0x268/0x2f0 [ 1428.676734] prepare_creds+0x39/0x410 [ 1428.680561] do_coredump+0x2e7/0x2d43 [ 1428.684375] ? lock_downgrade+0x740/0x740 [ 1428.688534] ? dump_align+0xa0/0xa0 [ 1428.692176] ? trace_hardirqs_off+0x50/0x200 [ 1428.696593] ? __lock_is_held+0xad/0x140 [ 1428.700683] ? __dequeue_signal+0x3f2/0x530 [ 1428.705016] ? find_held_lock+0x2d/0x110 [ 1428.709078] ? get_signal+0xe4e/0x1f90 [ 1428.712996] ? proc_coredump_connector+0x358/0x4e0 [ 1428.717928] ? proc_comm_connector+0x220/0x220 [ 1428.722520] ? lock_downgrade+0x740/0x740 [ 1428.726692] ? _raw_spin_unlock_irq+0x24/0x80 [ 1428.731210] get_signal+0xeed/0x1f90 [ 1428.734947] do_signal+0x8f/0x1710 [ 1428.738488] ? poll_freewait+0x250/0x250 [ 1428.742561] ? lock_downgrade+0x740/0x740 [ 1428.746710] ? setup_sigcontext+0x820/0x820 [ 1428.751048] ? do_pselect+0x2de/0x3c0 [ 1428.754871] ? fput+0x2b/0x190 [ 1428.758063] ? ksys_write+0x1c8/0x2a0 [ 1428.761878] ? exit_to_usermode_loop+0x36/0x2b0 [ 1428.766558] exit_to_usermode_loop+0x22b/0x2b0 [ 1428.771148] do_syscall_64+0x538/0x620 [ 1428.775042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1428.780234] RIP: 0033:0x45c889 [ 1428.783428] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1428.802329] RSP: 002b:00007ff2f1a3bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1428.810039] RAX: fffffffffffffdfe RBX: 00007ff2f1a3c6d4 RCX: 000000000045c889 [ 1428.817326] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 1428.824603] RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.831878] R10: 0000000020000140 R11: 0000000000000246 R12: 000000000000000c [ 1428.839148] R13: 0000000000000860 R14: 00000000004cb248 R15: 0000000000000000 08:00:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000100)) 08:00:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227e, &(0x7f0000000100)) [ 1428.995786] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:53 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:53 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1429.064031] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:54 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x92030000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227f, &(0x7f0000000100)) 08:00:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:54 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2282, &(0x7f0000000100)) [ 1430.165802] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:54 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1430.226477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1430.248653] bond162 (uninitialized): Released all slaves [ 1430.264116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, &(0x7f0000000100)) 08:00:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:54 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1430.503490] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:55 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0xfeffffff}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2284, &(0x7f0000000100)) 08:00:55 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:55 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0xc}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2285, &(0x7f0000000100)) [ 1431.635907] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1431.673110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x6, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000100)) [ 1431.718443] bond162 (uninitialized): Released all slaves [ 1431.752871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1431.793081] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2287, &(0x7f0000000100)) 08:00:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1432.011357] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:57 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0xffffff7f}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2288, &(0x7f0000000100)) 08:00:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:57 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1432.865112] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2289, &(0x7f0000000100)) 08:00:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xa, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00010012000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1432.961457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4b47, &(0x7f0000000100)) 08:00:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1433.029711] bond162 (uninitialized): Released all slaves [ 1433.056832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:57 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x300}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1433.155920] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:58 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4b49, &(0x7f0000000100)) 08:00:58 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:58 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0xc00}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:58 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1434.372678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1434.394103] bond162 (uninitialized): Released all slaves [ 1434.400678] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5382, &(0x7f0000000100)) [ 1434.466225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:58 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x1000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:58 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xf0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:00:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1434.691057] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1434.751248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1434.771282] bond162 (uninitialized): Released all slaves [ 1434.801303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:00:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5385, &(0x7f0000000100)) 08:00:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:00:59 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x3000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:00:59 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:00:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:00:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000100)) 08:00:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1435.550183] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:00:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x541b, &(0x7f0000000100)) [ 1435.656822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:00 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1435.706554] bond162 (uninitialized): Released all slaves [ 1435.722907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5421, &(0x7f0000000100)) 08:01:00 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x8000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:00 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5450, &(0x7f0000000100)) [ 1435.998557] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1436.082333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1436.114770] bond162 (uninitialized): Released all slaves [ 1436.156880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:00 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:01:00 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xa00, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5451, &(0x7f0000000100)) 08:01:00 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0xc000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b0001005e000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5452, &(0x7f0000000100)) 08:01:00 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xb00, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1436.648111] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1436.694439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1436.721673] bond162 (uninitialized): Released all slaves 08:01:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5460, &(0x7f0000000100)) [ 1436.762579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:01 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x10000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:01 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xec0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1436.933330] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40049409, &(0x7f0000000100)) 08:01:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:02 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00010068000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:02 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:02 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:01:02 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x156c, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40086602, &(0x7f0000000100)) [ 1437.950651] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40087602, &(0x7f0000000100)) [ 1438.028368] bond162 (uninitialized): Released all slaves 08:01:02 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:01:02 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x300000000000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:02 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x3f00, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4020940d, &(0x7f0000000100)) [ 1438.199552] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:03 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:01:03 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x6c15, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x80086601, &(0x7f0000000100)) 08:01:03 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x800000000000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x80087601, &(0x7f0000000100)) 08:01:03 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x8100, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc0045878, &(0x7f0000000100)) [ 1439.212265] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc0045878, &(0x7f0000000100)) 08:01:03 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xc00e, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b00010074000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) [ 1439.509211] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:04 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:01:04 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0xc00000000000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080401000600000003ce292fcc18ba6c0dfe946d63bc976799a426b914e408ed2838013d9bf1710f6f3e8b7e90d275824e34c2a00090"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc0189436, &(0x7f0000000100)) 08:01:04 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b0001007a000a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc020660b, &(0x7f0000000100)) [ 1440.508136] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:04 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x34000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc0481273, &(0x7f0000000100)) [ 1440.617061] nla_parse: 4 callbacks suppressed [ 1440.617071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:05 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x10100) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000100)) 08:01:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:01:05 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 1440.820117] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x400300, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:01:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:05 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x1400000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:01:05 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)={0x3c, 0x0, 0x0, 0x3, 0x8000000}) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x4}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) [ 1441.494934] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1441.601482] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000000)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:01:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1441.659067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x88, 0x4], 0x40}, 0x10) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000)) 08:01:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x2000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1441.897179] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xfffffffffffffffd, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x191640) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x880) fchdir(r0) 08:01:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x3000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1442.040227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1442.092028] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x1e) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) write$6lowpan_control(r2, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f62757320dd0104648283584f230020200a892a019da4018f69fc192fe97535c6a7d1a804014f7ba78d0101000000000000d3bcbde9b3c10f971350c0384d36c21a089d683b23468cc3b148e5426b9a1b2692b6e474012d016954462e55038efed4ef91be92afe721321066b295e93478f92144f9418e239160853e9ae1ca72977514e072c1c04f6534267830d3bb05a3898dc0948f8f39af6ca40aba5e28d29460425073d8b6e06b863569441fd01f9e7bc74774091fae2aea87e462e692cef7e728baea989ec4b15bd2e243396130dc6f43b907e15ad077ec6a906eb59220c7793ee35e31f59b8aa58d46604a3b671ac83bb2ee16ab89f32e0718b923ba42f9f3"], 0x112) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0x189, "9950d66840b80349f6eac28d6449ec83c034969429f633db3de39181498832e5", 0x2, 0x200, 0x5, 0x93, 0x10, 0x2, 0xffffffff, 0x2}) prctl$PR_SVE_GET_VL(0x33, 0x1d5d9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:01:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:06 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:01:06 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:07 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x6000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1442.720830] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 08:01:07 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x8000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1442.864380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:07 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x9000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1443.021571] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x100000001, 0x301201) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000040)=""/30, 0x1e) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x305041, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r7, 0xb0, "58952ab169cc4395921b29c497dca9f1bf1cd04ad1995627384dad2014a090478d8ccfb93d7c0cf797ec6c342c52b238dc4bf9bd5ae02b9b59007195238f668f988d13b80cb140819b35ce5fb80f9fc086660f1efe6c9077aeda7e4eb3fd889cb5575c782adf79e5dc84e412ce1f84a3117bda69a591fb917aa5f296e941b5789664bde3d618f3f28a5e6f6d78e3c4bc7c278e65c80f57b445817c297227876b4e287cb7edd4bd4c44fcc1fe9c7112a6"}, &(0x7f0000000300)=0xb8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000340)={r8, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x1, 0xa, 0x8, 0x3, 0x3ff, 0x9, 0xe071, 0xff, 0xbb, 0xf1, 0x9, 0x5, 0x2, 0x0, 0x1000]}, &(0x7f0000000440)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r4, 0x8000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r9, 0x4, 0x4, 0x800}, 0x10) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:01:07 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xa000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:07 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xb000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1443.253955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1443.337864] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:08 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x4000000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:01:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:08 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xf000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:08 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xc}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:08 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x10000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1443.755468] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:01:08 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x20000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1443.863751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1443.951026] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:08 executing program 2: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)) creat(&(0x7f0000000000)='./bus\x00', 0x20) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)={0x0, 0x0, 0x6f23691d, 0x0, 0xffffdffe}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000040)) 08:01:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000a0005000b0001007f020a0005403a0000000000050008000a0009d35b587e27a8b0b98ad4a128c1aa7cf68a040000003223262ef1dbd5855e9b9c3c4f3d85375c29e029741becb838b88ef046e0413349fe7bce87340d1678a7cf40f9335f7297cb072cd567309e4df2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b32265056d7425271ba4a7a00c7f44c83d98fd505c6a4dedc6bd01013241069f1422fc0ca8aa40c78e04cf07fc22fc1e8e19c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bf748fd5d49ec76b49abd15d813c09c3b4131d66de022f27274ca0bc3bbd422b6655193a397fc52443c81828a3e2ebbe6661596479de7660246e949a24208ff6b20233c31c6fb61d5f36e6886d81910e67139e0584b9ecf473ba6a41fb79f18d57971324045b5ed8c82dab2dedad00bdfc34810c7fcfb9319b7a8b087857f7b0128ce409b9c2e34a0561889c21d59acc4069856f6d691cf9b836ebb492296df3d75eb2e818c2716501862d94ece68c1d134ceaf118de50747a42e97dff1bdc5b1befeab7e1d60c38b1e11e0f8c17722d1ad1f1c7f8658894e2eb54529f345fc08cac02c9c83886d4034e2b58380ac41aa909c3c16a47aeb1e91b8a1eaa62335e680e58bcce28149ceb8664b0f88ae90d13df6fa6ba8319c987af888837b9382609764e08b278491d42e5ac716125b3ae8a1384860aa3c58f7402a59537e50efb3e97", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:01:08 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x3f000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1444.308011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:09 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x9203000000000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:01:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@remote={[], 0x3}, 0x8, 'veth0_to_bond\x00'}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) 08:01:09 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x6c150000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/272], 0x50}}, 0x0) 08:01:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:09 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:09 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x81000000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x1000000000013) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x42, 0x2, 0x81, 0x6, 0x1, 0xffff12a9, "0cea99e6ed625c2961863e101f554366b06497325a0a3bd8927df977df6a3ee06a61c74152101dfa1d73c020dd0b646c007b8227d4b382fa7ad4ff01e5915c3ef8d4"}}, 0x15a) 08:01:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:01:09 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x9effffff, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1445.186036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:09 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xc00e0000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) [ 1445.647182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:01:10 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 08:01:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000330474001800dfdbdf730001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef8e49887ee68e87ed5a30f304321b27fcefac1040000004d5174f627927737456b54921f664921e1615264cc762c1897040000000000000000a92da708cc5b460a46383502d39192ed1257af1867305485dc560b67fa689950386e7d44374265b739aadff8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09178c22d9786b1c56621f004000000211ccca4a46305318e000000c7a7c058404968eb16bf8620d0692a2f33b36a8311df2c491645724afa33edf5fcc39c682774edf3c2c09b12b30a1a572ae4ddb1abc64b39779b4b923c86b79ad0a3c14bb8a500"/272], 0x50}}, 0x0) 08:01:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000eda18f1700", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3, @ANYBLOB="000033b322b4e5e2f26630000000000000000000000086000000000000"], 0x24}}, 0x0) 08:01:10 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0xfeffffff00000000}, &(0x7f0000000440)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup2(r3, r3) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x6, "20f4ce53b532ffcd1f4924e223ac7273170713d16577194ccb45db4ed4180ba11bdc96474cc8195eba4be34b850b51e1a0e6cc00968f7278f5ba8040a0b7416079a5a7a36939d2a465f10377b396f8bf3c5eea4b20c328f5b07e78361d52baaaed8614f8f3f9742d170c17991a920529af96a82a518f027a58296581875f4a3c"}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)) 08:01:10 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x203, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x8002) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 08:01:10 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xfffff000, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1446.433263] validate_nla: 3 callbacks suppressed [ 1446.433272] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:01:10 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0xffffff7f, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 1446.551564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1446.597442] ================================================================== [ 1446.605181] BUG: KASAN: use-after-free in vlan_dev_get_iflink+0x5f/0x70 [ 1446.611964] Read of size 4 at addr ffff88803f558888 by task syz-executor.3/6834 [ 1446.619479] [ 1446.621118] CPU: 1 PID: 6834 Comm: syz-executor.3 Not tainted 4.19.114-syzkaller #0 [ 1446.628930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.638291] Call Trace: [ 1446.640890] dump_stack+0x188/0x20d [ 1446.644537] ? vlan_dev_get_iflink+0x5f/0x70 [ 1446.648961] print_address_description.cold+0x7c/0x212 [ 1446.654253] ? vlan_dev_get_iflink+0x5f/0x70 [ 1446.658678] kasan_report.cold+0x88/0x2b9 [ 1446.662842] vlan_dev_get_iflink+0x5f/0x70 [ 1446.667099] ? vlan_dev_poll_controller+0x10/0x10 [ 1446.671960] dev_get_iflink+0x73/0xe0 [ 1446.675779] rfc2863_policy+0x1ca/0x230 [ 1446.679777] linkwatch_do_dev+0x17/0x110 [ 1446.683854] linkwatch_forget_dev+0x16a/0x200 [ 1446.688371] netdev_run_todo+0x242/0x740 [ 1446.692456] ? rtnetlink_rcv_msg+0x3c3/0xaf0 [ 1446.696886] ? register_netdev+0x50/0x50 [ 1446.700993] ? rtnl_link_unregister+0x230/0x230 [ 1446.705705] rtnetlink_rcv_msg+0x460/0xaf0 [ 1446.709961] ? rtnetlink_put_metrics+0x520/0x520 [ 1446.714733] ? netdev_pick_tx+0x2f0/0x2f0 [ 1446.718893] ? __copy_skb_header+0x2c0/0x510 [ 1446.723314] ? sock_spd_release+0x270/0x270 [ 1446.727655] netlink_rcv_skb+0x160/0x410 [ 1446.731744] ? rtnetlink_put_metrics+0x520/0x520 [ 1446.736512] ? netlink_ack+0xa60/0xa60 [ 1446.740441] netlink_unicast+0x4d7/0x6a0 [ 1446.744519] ? netlink_attachskb+0x710/0x710 [ 1446.748973] netlink_sendmsg+0x80b/0xcd0 [ 1446.753062] ? netlink_unicast+0x6a0/0x6a0 [ 1446.757305] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1446.762517] ? netlink_unicast+0x6a0/0x6a0 [ 1446.766781] sock_sendmsg+0xcf/0x120 [ 1446.770507] ___sys_sendmsg+0x803/0x920 [ 1446.774496] ? copy_msghdr_from_user+0x410/0x410 [ 1446.779284] ? __fget+0x319/0x510 [ 1446.782755] ? lock_downgrade+0x740/0x740 [ 1446.786925] ? check_preemption_disabled+0x41/0x280 [ 1446.791982] ? __fget+0x340/0x510 [ 1446.795457] ? iterate_fd+0x350/0x350 [ 1446.799285] ? __fget_light+0x1d1/0x230 [ 1446.803291] __sys_sendmsg+0xec/0x1b0 [ 1446.807101] ? __ia32_sys_shutdown+0x70/0x70 [ 1446.811580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1446.816344] ? trace_hardirqs_off_caller+0x55/0x210 [ 1446.821373] ? do_syscall_64+0x21/0x620 [ 1446.825365] do_syscall_64+0xf9/0x620 [ 1446.829181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1446.834398] RIP: 0033:0x45c889 [ 1446.837603] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1446.856527] RSP: 002b:00007fd6b0da9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1446.864243] RAX: ffffffffffffffda RBX: 00007fd6b0daa6d4 RCX: 000000000045c889 [ 1446.871523] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1446.878820] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1446.886100] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1446.893378] R13: 00000000000009fe R14: 00000000004ccba4 R15: 000000000076bfac [ 1446.900666] [ 1446.902303] Allocated by task 6829: [ 1446.905939] kasan_kmalloc+0xbf/0xe0 [ 1446.909670] __kmalloc_node+0x4c/0x70 [ 1446.913492] kvmalloc_node+0x61/0xf0 [ 1446.917219] alloc_netdev_mqs+0x97/0xd50 [ 1446.921289] rtnl_create_link+0x1d4/0xa30 [ 1446.925442] rtnl_newlink+0xe1a/0x1440 [ 1446.929333] rtnetlink_rcv_msg+0x453/0xaf0 [ 1446.933574] netlink_rcv_skb+0x160/0x410 [ 1446.937643] netlink_unicast+0x4d7/0x6a0 [ 1446.941719] netlink_sendmsg+0x80b/0xcd0 [ 1446.945792] sock_sendmsg+0xcf/0x120 [ 1446.949522] ___sys_sendmsg+0x803/0x920 [ 1446.953507] __sys_sendmsg+0xec/0x1b0 [ 1446.957315] do_syscall_64+0xf9/0x620 [ 1446.961138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1446.966323] [ 1446.967997] Freed by task 6829: [ 1446.971297] __kasan_slab_free+0xf7/0x140 [ 1446.975448] kfree+0xce/0x220 [ 1446.978561] kvfree+0x59/0x60 [ 1446.981680] device_release+0x76/0x210 [ 1446.985577] kobject_put+0x17c/0x270 [ 1446.989298] netdev_run_todo+0x4f1/0x740 [ 1446.993366] rtnetlink_rcv_msg+0x460/0xaf0 [ 1446.997609] netlink_rcv_skb+0x160/0x410 [ 1447.001679] netlink_unicast+0x4d7/0x6a0 [ 1447.005752] netlink_sendmsg+0x80b/0xcd0 [ 1447.009819] sock_sendmsg+0xcf/0x120 [ 1447.013542] ___sys_sendmsg+0x803/0x920 [ 1447.017528] __sys_sendmsg+0xec/0x1b0 [ 1447.021337] do_syscall_64+0xf9/0x620 [ 1447.025144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1447.030333] [ 1447.031980] The buggy address belongs to the object at ffff88803f558780 [ 1447.031980] which belongs to the cache kmalloc-4096 of size 4096 [ 1447.044820] The buggy address is located 264 bytes inside of [ 1447.044820] 4096-byte region [ffff88803f558780, ffff88803f559780) [ 1447.056786] The buggy address belongs to the page: [ 1447.061724] page:ffffea0000fd5600 count:1 mapcount:0 mapping:ffff88812c3dcdc0 index:0x0 compound_mapcount: 0 [ 1447.071699] flags: 0xfffe0000008100(slab|head) [ 1447.076298] raw: 00fffe0000008100 ffffea0001019208 ffffea00024ab788 ffff88812c3dcdc0 [ 1447.084193] raw: 0000000000000000 ffff88803f558780 0000000100000001 0000000000000000 [ 1447.092077] page dumped because: kasan: bad access detected [ 1447.097791] [ 1447.099425] Memory state around the buggy address: [ 1447.104363] ffff88803f558780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1447.111733] ffff88803f558800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1447.119098] >ffff88803f558880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1447.126465] ^ [ 1447.130098] ffff88803f558900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1447.137468] ffff88803f558980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1447.144826] ================================================================== [ 1447.152181] Disabling lock debugging due to kernel taint [ 1447.160938] Kernel panic - not syncing: panic_on_warn set ... [ 1447.160938] [ 1447.168326] CPU: 1 PID: 6834 Comm: syz-executor.3 Tainted: G B 4.19.114-syzkaller #0 [ 1447.177515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.186876] Call Trace: [ 1447.189484] dump_stack+0x188/0x20d [ 1447.193125] panic+0x26a/0x50e [ 1447.196339] ? __warn_printk+0xf3/0xf3 [ 1447.200242] ? preempt_schedule_common+0x4a/0xc0 [ 1447.205027] ? vlan_dev_get_iflink+0x5f/0x70 [ 1447.209445] ? ___preempt_schedule+0x16/0x18 [ 1447.213865] ? trace_hardirqs_on+0x55/0x210 [ 1447.218197] ? vlan_dev_get_iflink+0x5f/0x70 [ 1447.222615] kasan_end_report+0x43/0x49 [ 1447.226597] kasan_report.cold+0xa4/0x2b9 [ 1447.230761] vlan_dev_get_iflink+0x5f/0x70 [ 1447.235009] ? vlan_dev_poll_controller+0x10/0x10 [ 1447.239863] dev_get_iflink+0x73/0xe0 [ 1447.243674] rfc2863_policy+0x1ca/0x230 [ 1447.247658] linkwatch_do_dev+0x17/0x110 [ 1447.251738] linkwatch_forget_dev+0x16a/0x200 [ 1447.256246] netdev_run_todo+0x242/0x740 [ 1447.260341] ? rtnetlink_rcv_msg+0x3c3/0xaf0 [ 1447.264766] ? register_netdev+0x50/0x50 [ 1447.268841] ? rtnl_link_unregister+0x230/0x230 [ 1447.273516] rtnetlink_rcv_msg+0x460/0xaf0 [ 1447.277773] ? rtnetlink_put_metrics+0x520/0x520 [ 1447.282535] ? netdev_pick_tx+0x2f0/0x2f0 [ 1447.286699] ? __copy_skb_header+0x2c0/0x510 [ 1447.291114] ? sock_spd_release+0x270/0x270 [ 1447.295451] netlink_rcv_skb+0x160/0x410 [ 1447.299528] ? rtnetlink_put_metrics+0x520/0x520 [ 1447.304321] ? netlink_ack+0xa60/0xa60 [ 1447.308261] netlink_unicast+0x4d7/0x6a0 [ 1447.312336] ? netlink_attachskb+0x710/0x710 [ 1447.316760] netlink_sendmsg+0x80b/0xcd0 [ 1447.320838] ? netlink_unicast+0x6a0/0x6a0 [ 1447.325125] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1447.330332] ? netlink_unicast+0x6a0/0x6a0 [ 1447.334590] sock_sendmsg+0xcf/0x120 [ 1447.338312] ___sys_sendmsg+0x803/0x920 [ 1447.342295] ? copy_msghdr_from_user+0x410/0x410 [ 1447.347057] ? __fget+0x319/0x510 [ 1447.350529] ? lock_downgrade+0x740/0x740 [ 1447.354696] ? check_preemption_disabled+0x41/0x280 [ 1447.359725] ? __fget+0x340/0x510 [ 1447.363188] ? iterate_fd+0x350/0x350 [ 1447.367019] ? __fget_light+0x1d1/0x230 [ 1447.371007] __sys_sendmsg+0xec/0x1b0 [ 1447.374852] ? __ia32_sys_shutdown+0x70/0x70 [ 1447.379284] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1447.384047] ? trace_hardirqs_off_caller+0x55/0x210 [ 1447.389076] ? do_syscall_64+0x21/0x620 [ 1447.393063] do_syscall_64+0xf9/0x620 [ 1447.396875] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1447.402069] RIP: 0033:0x45c889 [ 1447.405271] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1447.424176] RSP: 002b:00007fd6b0da9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1447.431890] RAX: ffffffffffffffda RBX: 00007fd6b0daa6d4 RCX: 000000000045c889 [ 1447.439175] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1447.446437] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1447.453714] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1447.460989] R13: 00000000000009fe R14: 00000000004ccba4 R15: 000000000076bfac [ 1447.469273] Kernel Offset: disabled [ 1447.472895] Rebooting in 86400 seconds..