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") (async) r0 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) (async) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d23e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) ftruncate(r0, 0x2007fff) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057640)={0x0, [{0x0}, {0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}], 0x0, "1637650e8eb2c6"}) (async) r187 = dup(r3) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006980)='net/protocols\x00') (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000004c00)={{r188, 0x0, 0x1000, 0x3, 0x1, 0xc, 0x400000000001f, 0x3, 0x2, 0x40000000, 0x100, 0x2, 0x3, 0xcc}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r187, 0x81f8943c, &(0x7f00000573c0)={0x0}) (async) r190 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r190, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) r191 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005180)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a94407d4c935db95c869d7f76c7670568982b4e020f698393aa0f3881f9c24aa56f15191fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413032d0cb7a2c8cb482bac0ac502d9ba96ffffff7f00001000003d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f81506f56dd022a174eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d333546cea45efb953e6bb2391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc1684f52be763b6f59e1d2683cc7c849c0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444ae8a5a4555f413daedd98a76c5e206ed55adea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2c4c7338945a457877b2a2990a5e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd6270873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b2c0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a43f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010000008df75cf43f8ecc8d3726602111b40e761fd210819a0382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0de8903ea969657422525bff501f4dcd021280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331b35ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea599b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7ea20003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fc8a488ac9b2645ec879f09ee9c2cac01b8babb757b5c59217b80d0dbbba582814a604e485e27a0bbfae38b44ae1c2e64cce3b27083b8246829e64056000302b8e8715405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc53702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe6422eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad49d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04abb9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eaeec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc4ebf9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4cf817a27b8703b56410c839641e09de2a7a709a8e5ed121a1d6c1575eb88bab99c85f174f4bf7c7ee72289a4b753615ca7b195c2ba8e9f788ed32d7ee75181b89d7d60e08597233bbbc82e53300046790b2f4e8f05de3e60969e81df9cad8e40dbdfb7753991b24ada3e77bc0924323339109d424396dc4437506b2f83490e893f586f29a824b514c1c59e70d68b9995b8e6a089eecbff989dda53ffa19b9b808c298dcd04000000000035a31640186dc328abfb71611acceacab09268d0b83f16a3009b9198fa9281e6d5c04e16448c096dd7719dcc0f3a9bd9e4e1a597605710dbc2b4620ff38987e3d67aa1b1a53df5cdccab7be5ba144ba385608e9d9912c71908924168e0d2c3962b09d10905044651b8695f243e99cc1b3d41f42190c56114bad726f862dbc3bc1fe157cdfd8d1c1467e0ea0700138527f2529cad7dc0e8ac192318ff41b63114602a6cd8b02e40c1d345f7de380d0c21a51a71ecd74afa09f3f81ecb9968e18b35db2e658b000000000000b7e3856feb1720f5aa1df6c63b7b43fcadc837a2ade36544f9b823c8304d72c546150a8b17333f5c8cf18bda5912158ea9d667d64def4aa4db30867d7ee671cef8319cb75fabbea2bdc69d0b2462e698e50c2d109c43d631f403ca768684f0d5e79fcbfbb820d400a39da61bc05d553e3380eb92630192c03d9315c7416abbc1fe7de0fc72b98148d201980d5714f035107bfda5c5126bd1c14818c3cbc15266821795cd12a8a96049bfb3bf6ba2ce1b0db17ef6007eea44b1fd074691fb33621979cb4b47c1352852774c1af5c70bd1c0c245bf395c19abf67523af4737caeaa080fcaf38218c655a09f2"], &(0x7f0000000100)='GPL\x00'}, 0x48) r192 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r191}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r195, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r192, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r196, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r195, 0xd0009412, &(0x7f0000001200)={r196, 0x100000000}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r191, 0xd000943e, &(0x7f0000002840)={r194, r193, "714dff6ef35b33f95caf84cda25e4d767bd63e70ea3c846d7d09e83dd4124cb356adaf997a156d751f6714d633ad47b74195534538b9e36b49ecb593b5379636c0bbb3c18fccd7251c42b1c0bfe018055bf6b97ca0670b9dce6a23868688e0c9c094e230db20158824fd35ff99d5cf7980525d03ce9148eb57e0439f7e3f977c31c2ecb51364d5631a7f5c863efa45eae15e669a1ec60e3a635ef7bf397ba973c2790962d601114fe506fcaca4b5384de3705b09eba9b49b68c1d5005604d79861f7b6a46eab28979cf74fce72e8f894bb61624fddb3e6dc3bccad080eb505c27dd6eda6e82a8ab9386417c40144187a19bb5d75759806e780b032a23b2570e2", "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"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r190, 0x81f8943c, &(0x7f0000003840)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r197}, {}, {}, {}, {}, {}, {r200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r198}, {}, {}, {}, {}, {}, {}, {}, {0x0, r198}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r197}, {}, {}, {}, {}, {0x0, r194}, {}, {}, {}, {}, {r200, r198}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r198}, {}, {}, {}, {}, {}, {}, {}, {}, {r203}, {}, {}, {}, {}, {r197}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r202}, {}, {}, {}, {0x0, r199}, {r201}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r196}, {}, {}, {}, {}, {r197}], 0x81}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005d640)={0x8, [{}, {0x0, r71}, {}, {r51}, {}, {0x0, r178}, {}, {r114}, {}, {r41}, {}, {0x0, r161}, {}, {}, {r143, r12}, {}, {r156, r147}, {r55}, {}, {r169, r179}, {}, {r174}, {r17, r82}, {}, {r125}, {}, {0x0, r9}, {}, {0x0, r162}, {}, {}, {r118, r32}, {r144, r161}, {0x0, r56}, {}, {r59}, {}, {}, {0x0, r111}, {}, {r160, r121}, {r90}, {r64, r60}, {0x0, r108}, {r130}, {r25, r102}, {r126, r40}, {0x0, r170}, {}, {}, {r41}, {}, {r110}, {r61}, {r21, r72}, {}, {}, {0x0, r180}, {r90}, {r183}, {r167}, {r20}, {r117}, {}, {r146}, {r13}, {r79}, {r160}, {0x0, r48}, {r164, r128}, {r16, r151}, {}, {0x0, r27}, {}, {r35}, {0x0, r7}, {}, {0x0, r39}, {}, {}, {0x0, r48}, {0x0, r182}, {r140}, {r166}, {0x0, r180}, {}, {r116}, {0x0, r105}, {}, {0x0, r52}, {0x0, r147}, {r76}, {0x0, r36}, {0x0, r157}, {0x0, r182}, {r126, r124}, {r57}, {r14}, {}, {}, {r92}, {r141, r87}, {r81}, {}, {r77, r53}, {}, {r73, r78}, {0x0, r168}, {}, {}, {r31, r26}, {r4}, {}, {r99}, {r120, r36}, {}, {r156, r44}, {r148}, {0x0, r26}, {0x0, r28}, {r6, r43}, {}, {r133, r70}, {0x0, r65}, {}, {0x0, r139}, {r49}, {0x0, r100}, {0x0, r155}, {}, {r10}, {0x0, r37}, {}, {r84}, {0x0, r184}, {r141}, {r185, r30}, {}, {0x0, r83}, {0x0, r119}, {0x0, r23}, {}, {}, {}, {r122, r58}, {r115}, {}, {r95}, {r46}, {}, {r123}, {}, {0x0, r32}, {r29, r142}, {0x0, r150}, {r49, r9}, {r149, r173}, {r163}, {}, {r47, r9}, {r90}, {}, {0x0, r36}, {0x0, r48}, {0x0, r186}, {r5}, {0x0, r124}, {r181, r137}, {r176}, {r69}, {r113, r50}, {r158, r22}, {}, {r169, r34}, {}, {0x0, r24}, {r42}, {0x0, r52}, {0x0, r170}, {0x0, r159}, {0x0, r15}, {r85, r38}, {0x0, r165}, {0x0, r62}, {r19}, {}, {r136}, {r101, r96}, {}, {r107}, {}, {0x0, r40}, {r169}, {0x0, r63}, {}, {}, {}, {}, {}, {r93, r112}, {}, {}, {}, {}, {0x0, r66}, {0x0, r162}, {r123}, {r171, r175}, {r76, r127}, {r99, r98}, {}, {}, {0x0, r138}, {r11}, {0x0, r40}, {0x0, r68}, {r103, r8}, {r80}, {}, {r109, r135}, {}, {}, {r132}, {r129, r105}, {r88}, {}, {r152}, {r33, r75}, {r172}, {0x0, r32}, {0x0, r86}, {r176}, {}, {r141, r97}, {}, {r172, r177}, {0x0, r134}, {r106}, {0x0, r83}, {r145}, {0x0, r54}, {r104, r112}, {r73, r94}, {0x0, r74}, {0x0, r153}, {r46, r137}, {0x0, r131}, {r154, r91}, {0x0, r45}, {r67, r18}, {0x0, r71}, {r89}, {r188, r155}, {r129, r138}, {r189, r198}], 0x40, "21ffe2a79eb061"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) (async) sendfile(r187, r2, 0x0, 0x1000000201004) 07:31:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 96.342145][ T5263] loop3: detected capacity change from 0 to 2048 [ 96.348974][ T5267] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 96.357350][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.426329][ T3395] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 07:31:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:15 executing program 5: io_setup(0xb, &(0x7f0000000280)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_pgetevents(r2, 0x7fffffff, 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)={r4, r5+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x9]}, 0x8}) r6 = socket(0xb, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0xd0a}]) 07:31:15 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendfile(r2, r2, 0x0, 0x108000000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) 07:31:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r3 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x0, 0x2, 0x3, 0x1, 0x1, 0x8, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff}, @cb_func={0x18, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x3, 0xbb, &(0x7f0000000200)=""/187, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xc, 0xfffff098, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[r2, r0, r0, r3], &(0x7f0000000400)=[{0x3, 0x2, 0xb, 0xa}, {0x4, 0x1, 0x8, 0x4}, {0x1, 0x1, 0xd, 0x3}, {0x3, 0x4, 0x8, 0x7}, {0x0, 0x1, 0x1, 0xf}, {0x4, 0x3, 0x2, 0x1}, {0x4, 0x5, 0x6, 0x3}, {0x1, 0x2, 0x10, 0x4}], 0x10, 0x57}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x19, 0x10, 0x581, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) 07:31:15 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 96.861274][ T5273] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 96.864038][ T27] audit: type=1400 audit(1695627075.945:299): avc: denied { create } for pid=5271 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 96.869595][ T5273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r3 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x0, 0x2, 0x3, 0x1, 0x1, 0x8, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff}, @cb_func={0x18, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x3, 0xbb, &(0x7f0000000200)=""/187, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xc, 0xfffff098, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[r2, r0, r0, r3], &(0x7f0000000400)=[{0x3, 0x2, 0xb, 0xa}, {0x4, 0x1, 0x8, 0x4}, {0x1, 0x1, 0xd, 0x3}, {0x3, 0x4, 0x8, 0x7}, {0x0, 0x1, 0x1, 0xf}, {0x4, 0x3, 0x2, 0x1}, {0x4, 0x5, 0x6, 0x3}, {0x1, 0x2, 0x10, 0x4}], 0x10, 0x57}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x19, 0x10, 0x581, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) 07:31:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:16 executing program 5: io_setup(0xb, &(0x7f0000000280)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) io_setup(0x3, &(0x7f00000004c0)=0x0) (rerun: 32) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) io_pgetevents(r2, 0x7fffffff, 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)={r4, r5+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x9]}, 0x8}) (async) r6 = socket(0xb, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0xd0a}]) 07:31:16 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r3 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x0, 0x2, 0x3, 0x1, 0x1, 0x8, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff}, @cb_func={0x18, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x3, 0xbb, &(0x7f0000000200)=""/187, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xc, 0xfffff098, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[r2, r0, r0, r3], &(0x7f0000000400)=[{0x3, 0x2, 0xb, 0xa}, {0x4, 0x1, 0x8, 0x4}, {0x1, 0x1, 0xd, 0x3}, {0x3, 0x4, 0x8, 0x7}, {0x0, 0x1, 0x1, 0xf}, {0x4, 0x3, 0x2, 0x1}, {0x4, 0x5, 0x6, 0x3}, {0x1, 0x2, 0x10, 0x4}], 0x10, 0x57}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x19, 0x10, 0x581, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x19, 0x10, 0x581, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) 07:31:16 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 97.233271][ T5293] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 97.241937][ T5293] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.317333][ T5305] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 97.325776][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:16 executing program 5: io_setup(0xb, &(0x7f0000000280)=0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_pgetevents(r2, 0x7fffffff, 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)={r4, r5+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x9]}, 0x8}) r6 = socket(0xb, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0xd0a}]) 07:31:16 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:16 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendfile(r2, r2, 0x0, 0x108000000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) 07:31:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 97.879429][ T5317] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 97.887977][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:17 executing program 5: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 97.922868][ T5321] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 97.931338][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x34, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 98.009733][ T5327] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 98.018679][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:17 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:17 executing program 3: request_key(&(0x7f0000000680)='.request_key_auth\x00', 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="d038abfd169cba35cd3d2649405c95752e074ee61cde981c2a70347ce4cb0709ac496b63ccb6b419908013e2f9323c411d1bb338793f695955187128f1da5cf57806fc96072ccb45376c8efa6d253eed4604a83391a089a435", 0x59, 0xfffffffffffffff9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r0, 0x0) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x64, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) 07:31:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:17 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendfile(r2, r2, 0x0, 0x108000000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) 07:31:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:17 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:17 executing program 3: request_key(&(0x7f0000000680)='.request_key_auth\x00', 0x0, 0x0, 0x0) (async) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="d038abfd169cba35cd3d2649405c95752e074ee61cde981c2a70347ce4cb0709ac496b63ccb6b419908013e2f9323c411d1bb338793f695955187128f1da5cf57806fc96072ccb45376c8efa6d253eed4604a83391a089a435", 0x59, 0xfffffffffffffff9) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r0, 0x0) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x64, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) 07:31:18 executing program 3: request_key(&(0x7f0000000680)='.request_key_auth\x00', 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="d038abfd169cba35cd3d2649405c95752e074ee61cde981c2a70347ce4cb0709ac496b63ccb6b419908013e2f9323c411d1bb338793f695955187128f1da5cf57806fc96072ccb45376c8efa6d253eed4604a83391a089a435", 0x59, 0xfffffffffffffff9) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r0, 0x0) (async) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x64, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) 07:31:18 executing program 5: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:18 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:18 executing program 3: pread64(0xffffffffffffffff, &(0x7f0000000180)=""/104, 0x68, 0x8000000000000001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) close_range(r1, r2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "61bef2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 07:31:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x146, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:18 executing program 3: pread64(0xffffffffffffffff, &(0x7f0000000180)=""/104, 0x68, 0x8000000000000001) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) (async) close_range(r1, r2, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "61bef2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 07:31:18 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:18 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:18 executing program 3: pread64(0xffffffffffffffff, &(0x7f0000000180)=""/104, 0x68, 0x8000000000000001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) (async) listen(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) close_range(r1, r2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "61bef2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 07:31:19 executing program 5: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:19 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0xc202}}, {@grpid}]}, 0x11, 0x4b4, &(0x7f0000000540)="$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") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file1\x00'}) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0x84, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000003c0)={r5, 0xef}, 0x8) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)="1c7bd8cc17a97a6325e8eec0c26820576429a6761c7dc6680889e1e7192366b01529fb5239e422c213077404cd477982ce43f436ff7f9bb0517e9fbcfd5800cdd824242b62d7e7b34fbcb5377023b8febfc577cca56fbd2d54e79a926ef551f0c3d6d6ac6f83ea1e66d9fcb883e7a3fb6efeb5adcdaa6c7b5491835298d5827d46ff17526a7305b7fad90556d8d657b5c33370ee0dfaf7647880eeb4240bda9a4e1454c317af5752689b510f6d0202b7b362026676cc518ececbbcb2cea4a9550c86c75314b5c9185aa30bd8877f27", 0xcf) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0x84, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="430604000000"], 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x7, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x5, 0x2}, {0x2, 0x2}, {0x7, 0x4}, {0x9, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x3, 0x4}, {0x7, 0x4}]}, @volatile={0xc}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @func={0xf, 0x0, 0x0, 0xc, 0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x49}]}, {0x0, [0x61, 0x30, 0x30, 0x61, 0x2e]}}, &(0x7f0000000240)=""/113, 0xc7, 0x71, 0x0, 0x1}, 0x20) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000300, 0x0, 0x0) 07:31:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 100.011171][ T5391] loop3: detected capacity change from 0 to 512 [ 100.053584][ T5391] EXT4-fs (loop3): 1 orphan inode deleted [ 100.059938][ T5391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.079074][ T5391] ext4 filesystem being mounted at /root/syzkaller-testdir2097008716/syzkaller.780lL5/59/file1 supports timestamps until 2038-01-19 (0x7fffffff) 07:31:19 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:19 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r1, r1, 0x0, 0x108000000) 07:31:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:19 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0xc202}}, {@grpid}]}, 0x11, 0x4b4, &(0x7f0000000540)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzHWQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyL5gfz5wfM+5V9L3e2x0dc+9x7oB7FunIuJqRAxExLmIGM7Wp1m51mxstB/36OHd6WZJotG48VkSSbau81pJtjzSfkocjIi/XYv4Z/LDuLW19YWpSqW8krVL9cXlUm1t/fz84tRcea68NDExfmny8uTFybG+9HMkIq786aP//+e1P19567e337/5ydl/NdMayrY/2Y9+ane90PpddAxGxMpOBMvBQLYs5JwHAADb0zzG/0lE/Kp1/D8cA62jUwAAAGAvafxhKL5OIhoAAADAnpW25sAmaTGbCzAUaVostufw/iwOp5Vqrf6b2erq0kx7ruxIFNLZ+Up5LJsrPBKFpNkez+bYdtoXNrUnIuJYRPxv+FCrXZyuVmbyPvkBAAAA+8SRTeP/L4fb438AAABgjxnJOwEAAABgxxn/AwAAwN5n/A8AAAB72l+uX2+WRuf+1zO31lYXqrfOz5RrC8XF1enidHVluThXrc61vrNvcavXq1Sry7+LpdU7pXq5Vi/V1tZvLlZXl+o355+6BTYAAACwi4798v57SURs/P5QqzQdyDspYFckz/PgD3cuD2D3DeSdAJCbwbwTAHJTyDsBIHdbnQfoOXnn7f7nAgAA7IzRn/e+/u/cAOxtad4JAAC7zvV/2L8KZgDCvvfjLba/+PX/RuO5EgIAAPpuqFWStJhdCxyKNC0WI462bgtQSGbnK+WxbHzw7nDhR832eOuZyfP97zAAAAAAAAAAAAAAAAAAAAAAAAAA7GONRhINAAAAYE+LSD9OWt/mHzE6fGZo8/mBA8lXw61lRNx+5cZLd6bq9ZXx5vrPH6+vv5ytv5DHGQwAAABgs844vTOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB+evTw7nSn7GbcT/8YESPd4g/GwdbyYBQi4vAXSQw+8bwkIgb6EH/jXkQc7xY/aaYVI1kW3eIfyjF+GhFH+hAf9rP7zf3P1W7vvzROtZbd33+DWXlRvfd/6eP930CP/c/RbcY48eCNUs/49yJODHbf/3TiJz3in95m/H/8fX2917bGqxGjXT9/kqdileqLy6Xa2vr5+cWpufJceWliYvzS5OXJi5Njpdn5Sjn72TXGf3/x5rfP6v/hHvFHtuj/mW32/5sHdx7+tF0tdIt/9nT3z9/jPeKn2Wffr7N6c/top77Rrj/p5OvvnHxW/2d69H+rv//Zbfb/3F///cE2HwoA7ILa2vrCVKVSXlFRUVF5XMl7zwQAAPTb9wf9eWcCAAAAAAAAAAAAAAAAAAAA+9dufJ3Y5pgb+XQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZvgsAAP//96DU7Q==") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file1\x00'}) (async) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0x84, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000003c0)={r5, 0xef}, 0x8) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)="1c7bd8cc17a97a6325e8eec0c26820576429a6761c7dc6680889e1e7192366b01529fb5239e422c213077404cd477982ce43f436ff7f9bb0517e9fbcfd5800cdd824242b62d7e7b34fbcb5377023b8febfc577cca56fbd2d54e79a926ef551f0c3d6d6ac6f83ea1e66d9fcb883e7a3fb6efeb5adcdaa6c7b5491835298d5827d46ff17526a7305b7fad90556d8d657b5c33370ee0dfaf7647880eeb4240bda9a4e1454c317af5752689b510f6d0202b7b362026676cc518ececbbcb2cea4a9550c86c75314b5c9185aa30bd8877f27", 0xcf) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0x84, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="430604000000"], 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x7, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x5, 0x2}, {0x2, 0x2}, {0x7, 0x4}, {0x9, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x3, 0x4}, {0x7, 0x4}]}, @volatile={0xc}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @func={0xf, 0x0, 0x0, 0xc, 0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x49}]}, {0x0, [0x61, 0x30, 0x30, 0x61, 0x2e]}}, &(0x7f0000000240)=""/113, 0xc7, 0x71, 0x0, 0x1}, 0x20) (async) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000300, 0x0, 0x0) [ 100.097219][ T27] audit: type=1400 audit(1695627079.185:300): avc: denied { append } for pid=5390 comm="syz-executor.3" path="/root/syzkaller-testdir2097008716/syzkaller.780lL5/59/file1/blkio.bfq.time_recursive" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.140465][ T3097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:31:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 100.171692][ T5402] loop3: detected capacity change from 0 to 512 [ 100.198632][ T5402] EXT4-fs (loop3): 1 orphan inode deleted [ 100.204484][ T5402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.226872][ T5402] ext4 filesystem being mounted at /root/syzkaller-testdir2097008716/syzkaller.780lL5/60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.256913][ T3097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:31:19 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@init_itable}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0xc202}}, {@grpid}]}, 0x11, 0x4b4, &(0x7f0000000540)="$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") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file1\x00'}) (async, rerun: 64) r2 = socket$inet(0x2, 0x80001, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0x84, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000003c0)={r5, 0xef}, 0x8) (async, rerun: 64) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)="1c7bd8cc17a97a6325e8eec0c26820576429a6761c7dc6680889e1e7192366b01529fb5239e422c213077404cd477982ce43f436ff7f9bb0517e9fbcfd5800cdd824242b62d7e7b34fbcb5377023b8febfc577cca56fbd2d54e79a926ef551f0c3d6d6ac6f83ea1e66d9fcb883e7a3fb6efeb5adcdaa6c7b5491835298d5827d46ff17526a7305b7fad90556d8d657b5c33370ee0dfaf7647880eeb4240bda9a4e1454c317af5752689b510f6d0202b7b362026676cc518ececbbcb2cea4a9550c86c75314b5c9185aa30bd8877f27", 0xcf) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0x84, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="430604000000"], 0xa) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x7, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x5, 0x2}, {0x2, 0x2}, {0x7, 0x4}, {0x9, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x3, 0x4}, {0x7, 0x4}]}, @volatile={0xc}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @func={0xf, 0x0, 0x0, 0xc, 0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x49}]}, {0x0, [0x61, 0x30, 0x30, 0x61, 0x2e]}}, &(0x7f0000000240)=""/113, 0xc7, 0x71, 0x0, 0x1}, 0x20) (async) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000300, 0x0, 0x0) 07:31:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x9fa, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 100.757669][ T5418] loop3: detected capacity change from 0 to 512 [ 100.777301][ T5418] EXT4-fs (loop3): 1 orphan inode deleted [ 100.783091][ T5418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.795903][ T5418] ext4 filesystem being mounted at /root/syzkaller-testdir2097008716/syzkaller.780lL5/61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.827854][ T3097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 07:31:20 executing program 5: syz_emit_ethernet(0xb0, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x7a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "ff0700000000001995319c04"}, {0x19, 0x1, "fe906d26efe39393"}]}}}}}}, 0x0) 07:31:20 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r1, r1, 0x0, 0x108000000) 07:31:20 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:20 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x9fb, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:20 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:20 executing program 5: syz_emit_ethernet(0xb0, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x7a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "ff0700000000001995319c04"}, {0x19, 0x1, "fe906d26efe39393"}]}}}}}}, 0x0) 07:31:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 100.987122][ T5432] validate_nla: 15 callbacks suppressed [ 100.987136][ T5432] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 101.001015][ T5432] __nla_validate_parse: 15 callbacks suppressed [ 101.001025][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:20 executing program 5: syz_emit_ethernet(0xb0, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x7a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "ff0700000000001995319c04"}, {0x19, 0x1, "fe906d26efe39393"}]}}}}}}, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x7a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "ff0700000000001995319c04"}, {0x19, 0x1, "fe906d26efe39393"}]}}}}}}, 0x0) (async) 07:31:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xb00, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:20 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r1, r1, 0x0, 0x108000000) 07:31:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 101.055385][ T5440] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 101.063767][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) [ 101.124661][ T5447] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 101.133016][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.174734][ T27] audit: type=1400 audit(1695627080.245:301): avc: denied { mounton } for pid=5448 comm="syz-executor.5" path=2F726F6F742F73797A6B616C6C65722D746573746469723830303238353832302F73797A6B616C6C65722E7A4F323530412F3131302FE91F7189591E9233614B dev="sda1" ino=1975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 101.219459][ T5451] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 101.227852][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:20 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:20 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 07:31:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xd00, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:21 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00', @remote}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x12, 0x69}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48c87800"/13, @ANYRES32=r3, @ANYBLOB="0300000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0x10}, {0x0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xa0f6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') lseek(r4, 0x9, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000940)) 07:31:21 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x12, 0x69}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48c87800"/13, @ANYRES32=r3, @ANYBLOB="0300000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0x10}, {0x0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xa0f6}]}}]}, 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') lseek(r4, 0x9, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000940)) 07:31:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:21 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 101.913203][ T5461] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 101.921554][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.942594][ T5464] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 07:31:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x12, 0x69}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48c87800"/13, @ANYRES32=r3, @ANYBLOB="0300000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0x10}, {0x0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xa0f6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') lseek(r4, 0x9, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000940)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x12, 0x69}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48c87800"/13, @ANYRES32=r3, @ANYBLOB="0300000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0x10}, {0x0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xa0f6}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') (async) lseek(r4, 0x9, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) (async) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000940)) (async) [ 102.002070][ T5471] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 102.010397][ T5471] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xec0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 102.484999][ T5490] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 102.493503][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00', @remote}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:22 executing program 1: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00', @remote}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:22 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:22 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x1100, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 102.956904][ T5493] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 102.965186][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00', @remote}) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:22 executing program 1: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 103.043141][ T5505] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 103.051604][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00', @remote}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x1400, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 103.119152][ T5515] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 103.127540][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:22 executing program 1: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x2500, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:22 executing program 3: unshare(0x6c020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001300)=""/29, 0x1d, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) poll(&(0x7f0000000040)=[{}], 0x1, 0x800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/213, 0xd5, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r3, 0x9, 0x0, [0x10001, 0x0, 0x0, 0x400], [0x0, 0x0, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x0, 0x0, 0x5e, 0xaad, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x9e, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9, 0x0, 0x0, 0x800000000000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x6, @inherit={0x0, 0x0}, @devid=r3}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000b00)) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000280)={@local, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80001041}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=@delchain={0x51c, 0x65, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xd}, {0x3, 0xf}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_bpf={{0x8}, {0x4e0, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x6c, 0x1, [@m_simple={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x5, 0x10000000, 0x8, 0x6}}]}, {0xf, 0x6, "affd481109ffc0416d9154"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_POLICE={0x468, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4cb, 0x4a7, 0x6, 0x800, 0x6, 0x1, 0x7fff, 0x81, 0x44d8, 0x1ff, 0x800, 0xde, 0xfffffffc, 0x4, 0x1, 0x1ff, 0x7, 0x7ff, 0x4, 0x3, 0x517b, 0xffffffff, 0x5, 0x7fff, 0xff, 0x7fff, 0x1, 0x9, 0x1a63, 0x1, 0x5, 0x9, 0x893, 0x20, 0x80000001, 0x401, 0x871, 0x1ff, 0x4b3f, 0x4, 0x1, 0x6, 0xffff8000, 0x2, 0x7, 0x4, 0x2, 0x6, 0x5, 0x80000000, 0x2, 0x93, 0x12000000, 0x8000, 0xfb, 0x4, 0x35, 0x7fffffff, 0x8f061fe, 0xc8d4, 0x734, 0x2, 0x6, 0x9, 0x4, 0x6, 0x586b, 0xffffffff, 0x6f39, 0x6, 0x5588, 0x4, 0x8bf1, 0xfffffffd, 0x1, 0x10000, 0x2, 0x9, 0x1, 0x3ff, 0xe5, 0xfffffff9, 0x5, 0x1, 0xe799, 0x1, 0x1f, 0x3, 0x0, 0xec, 0x1f, 0x200, 0x7f, 0x39, 0x8, 0x1ff, 0x3b3, 0x800, 0x4, 0x1, 0xde0, 0xffff, 0x0, 0x1, 0x3ed, 0x8001, 0xffff, 0x0, 0x7fff, 0x6, 0x1000, 0x6, 0x20000, 0x1, 0x0, 0x7fff, 0xea14, 0xb9, 0xce, 0x9, 0xffffffff, 0x9, 0x6, 0x4, 0x1ff, 0x5, 0x10001, 0x101, 0x2, 0x2, 0x7, 0x5, 0x0, 0x6, 0x8, 0x101, 0xbb49, 0xfffffff9, 0x4, 0xa957, 0x4, 0x800, 0x3167f8ab, 0x400, 0x1, 0x9fc7, 0xfffffff9, 0x5, 0x2, 0x0, 0x6, 0x7fffffff, 0x40, 0x800, 0x8, 0x8001, 0x2, 0xa63, 0x5e, 0x9, 0x8001, 0x0, 0x9, 0x6, 0x9, 0x3ae9, 0x6, 0x1, 0x3, 0xfff, 0x2, 0x2, 0x200, 0xfff, 0xa3, 0x4, 0xb19, 0x0, 0x8001, 0x101, 0x0, 0x7, 0x9, 0x5, 0x35, 0x8, 0x8, 0x1, 0x3, 0x200, 0x7, 0xffff, 0x0, 0x5312, 0x20000000, 0x9, 0x5, 0x0, 0x80000000, 0x7f, 0xfffffff9, 0x643f, 0xfff, 0x0, 0x5, 0x160a9f70, 0x5, 0x9, 0x1, 0x4, 0x3, 0x2, 0x4815e7d3, 0x2, 0x5, 0xd7, 0x106, 0x7fff, 0x9, 0x100, 0x7, 0x0, 0x7, 0x80000001, 0x5, 0xe2c6, 0x10000, 0x2, 0xd14a, 0x3840, 0xfffffffb, 0x9, 0x4, 0xfffffffe, 0xbf3b, 0x1ff, 0x8001, 0x80, 0x4c7, 0x6, 0xe0, 0x101, 0x8, 0x4, 0x5, 0x81, 0x1, 0x2e, 0xf82, 0x9, 0x8, 0xff, 0x7, 0x7, 0x1668000, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x0, 0x2, {0x1, 0x2, 0x7, 0x3, 0x10, 0x87d}, {0xf1, 0x0, 0x5, 0x2ad7, 0x2, 0x8001}, 0x7, 0x0, 0xfffffffe}}]}]}}, @TCA_RATE={0x6, 0x5, {0x34, 0x1f}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) dup3(0xffffffffffffffff, r1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000a80)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="340000002c00000426bd7000fddbdf250000000051e7c9981d29f53931a4a857b56e099b8783a11cbbc1cd8e9642c72669e58ccde80aa57d0812da5e978c7db2c5e173b4ad2192682c4053283277376558c64ba5a2a508c969c51323cbb6052c2c4fdfe420621c3c3bca16c374e948bfe2758f3328dd8e9e09d54ec4c6b33a0c82f92e3371c03a9e889d1bb795b85c6c90ef99e949a8abb60ed4badce052d687d0dc1d8700"/179, @ANYRES32=r4, @ANYBLOB="070007000c0004000d000c0008000b00030e00000600050000ee0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) unshare(0x4010000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003904000002001000000000000000", @ANYRES32=r6, @ANYBLOB="03040000000000001c0012800b00010067656e65766500000c0002800500040001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x200, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040098}, 0x40080c2) sendto$inet6(r0, &(0x7f0000000080)="0561df00930000000000000088a8", 0xe, 0x0, 0x0, 0x0) 07:31:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x3400, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00', @remote}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:23 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x108000000) 07:31:23 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:23 executing program 1: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x4601, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00', @remote}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x4800, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x4c00, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:23 executing program 1: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:23 executing program 3: unshare(0x6c020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180), 0x4) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001300)=""/29, 0x1d, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) (async) poll(&(0x7f0000000040)=[{}], 0x1, 0x800) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/213, 0xd5, 0x1, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r3, 0x9, 0x0, [0x10001, 0x0, 0x0, 0x400], [0x0, 0x0, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x0, 0x0, 0x5e, 0xaad, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x9e, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9, 0x0, 0x0, 0x800000000000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x6, @inherit={0x0, 0x0}, @devid=r3}) (async) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000b00)) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x0) (async) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000280)={@local, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80001041}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=@delchain={0x51c, 0x65, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xd}, {0x3, 0xf}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_bpf={{0x8}, {0x4e0, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x6c, 0x1, [@m_simple={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x5, 0x10000000, 0x8, 0x6}}]}, {0xf, 0x6, "affd481109ffc0416d9154"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_POLICE={0x468, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4cb, 0x4a7, 0x6, 0x800, 0x6, 0x1, 0x7fff, 0x81, 0x44d8, 0x1ff, 0x800, 0xde, 0xfffffffc, 0x4, 0x1, 0x1ff, 0x7, 0x7ff, 0x4, 0x3, 0x517b, 0xffffffff, 0x5, 0x7fff, 0xff, 0x7fff, 0x1, 0x9, 0x1a63, 0x1, 0x5, 0x9, 0x893, 0x20, 0x80000001, 0x401, 0x871, 0x1ff, 0x4b3f, 0x4, 0x1, 0x6, 0xffff8000, 0x2, 0x7, 0x4, 0x2, 0x6, 0x5, 0x80000000, 0x2, 0x93, 0x12000000, 0x8000, 0xfb, 0x4, 0x35, 0x7fffffff, 0x8f061fe, 0xc8d4, 0x734, 0x2, 0x6, 0x9, 0x4, 0x6, 0x586b, 0xffffffff, 0x6f39, 0x6, 0x5588, 0x4, 0x8bf1, 0xfffffffd, 0x1, 0x10000, 0x2, 0x9, 0x1, 0x3ff, 0xe5, 0xfffffff9, 0x5, 0x1, 0xe799, 0x1, 0x1f, 0x3, 0x0, 0xec, 0x1f, 0x200, 0x7f, 0x39, 0x8, 0x1ff, 0x3b3, 0x800, 0x4, 0x1, 0xde0, 0xffff, 0x0, 0x1, 0x3ed, 0x8001, 0xffff, 0x0, 0x7fff, 0x6, 0x1000, 0x6, 0x20000, 0x1, 0x0, 0x7fff, 0xea14, 0xb9, 0xce, 0x9, 0xffffffff, 0x9, 0x6, 0x4, 0x1ff, 0x5, 0x10001, 0x101, 0x2, 0x2, 0x7, 0x5, 0x0, 0x6, 0x8, 0x101, 0xbb49, 0xfffffff9, 0x4, 0xa957, 0x4, 0x800, 0x3167f8ab, 0x400, 0x1, 0x9fc7, 0xfffffff9, 0x5, 0x2, 0x0, 0x6, 0x7fffffff, 0x40, 0x800, 0x8, 0x8001, 0x2, 0xa63, 0x5e, 0x9, 0x8001, 0x0, 0x9, 0x6, 0x9, 0x3ae9, 0x6, 0x1, 0x3, 0xfff, 0x2, 0x2, 0x200, 0xfff, 0xa3, 0x4, 0xb19, 0x0, 0x8001, 0x101, 0x0, 0x7, 0x9, 0x5, 0x35, 0x8, 0x8, 0x1, 0x3, 0x200, 0x7, 0xffff, 0x0, 0x5312, 0x20000000, 0x9, 0x5, 0x0, 0x80000000, 0x7f, 0xfffffff9, 0x643f, 0xfff, 0x0, 0x5, 0x160a9f70, 0x5, 0x9, 0x1, 0x4, 0x3, 0x2, 0x4815e7d3, 0x2, 0x5, 0xd7, 0x106, 0x7fff, 0x9, 0x100, 0x7, 0x0, 0x7, 0x80000001, 0x5, 0xe2c6, 0x10000, 0x2, 0xd14a, 0x3840, 0xfffffffb, 0x9, 0x4, 0xfffffffe, 0xbf3b, 0x1ff, 0x8001, 0x80, 0x4c7, 0x6, 0xe0, 0x101, 0x8, 0x4, 0x5, 0x81, 0x1, 0x2e, 0xf82, 0x9, 0x8, 0xff, 0x7, 0x7, 0x1668000, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x0, 0x2, {0x1, 0x2, 0x7, 0x3, 0x10, 0x87d}, {0xf1, 0x0, 0x5, 0x2ad7, 0x2, 0x8001}, 0x7, 0x0, 0xfffffffe}}]}]}}, @TCA_RATE={0x6, 0x5, {0x34, 0x1f}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) (async) dup3(0xffffffffffffffff, r1, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000a80)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="340000002c00000426bd7000fddbdf250000000051e7c9981d29f53931a4a857b56e099b8783a11cbbc1cd8e9642c72669e58ccde80aa57d0812da5e978c7db2c5e173b4ad2192682c4053283277376558c64ba5a2a508c969c51323cbb6052c2c4fdfe420621c3c3bca16c374e948bfe2758f3328dd8e9e09d54ec4c6b33a0c82f92e3371c03a9e889d1bb795b85c6c90ef99e949a8abb60ed4badce052d687d0dc1d8700"/179, @ANYRES32=r4, @ANYBLOB="070007000c0004000d000c0008000b00030e00000600050000ee0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) unshare(0x4010000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003904000002001000000000000000", @ANYRES32=r6, @ANYBLOB="03040000000000001c0012800b00010067656e65766500000c0002800500040001"], 0x3c}}, 0x0) (async) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x200, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040098}, 0x40080c2) (async) sendto$inet6(r0, &(0x7f0000000080)="0561df00930000000000000088a8", 0xe, 0x0, 0x0, 0x0) 07:31:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x40000) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:23 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x108000000) 07:31:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:23 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:23 executing program 1: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x6c00, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:23 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x108000000) 07:31:23 executing program 3: unshare(0x6c020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x0) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180), 0x4) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001300)=""/29, 0x1d, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) (async) poll(&(0x7f0000000040)=[{}], 0x1, 0x800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/213, 0xd5, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r3, 0x9, 0x0, [0x10001, 0x0, 0x0, 0x400], [0x0, 0x0, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x0, 0x0, 0x5e, 0xaad, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x9e, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9, 0x0, 0x0, 0x800000000000000]}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x6, @inherit={0x0, 0x0}, @devid=r3}) (async) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000b00)) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x0) (async) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000280)={@local, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80001041}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=@delchain={0x51c, 0x65, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xd}, {0x3, 0xf}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_bpf={{0x8}, {0x4e0, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x6c, 0x1, [@m_simple={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x5, 0x10000000, 0x8, 0x6}}]}, {0xf, 0x6, "affd481109ffc0416d9154"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_POLICE={0x468, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4cb, 0x4a7, 0x6, 0x800, 0x6, 0x1, 0x7fff, 0x81, 0x44d8, 0x1ff, 0x800, 0xde, 0xfffffffc, 0x4, 0x1, 0x1ff, 0x7, 0x7ff, 0x4, 0x3, 0x517b, 0xffffffff, 0x5, 0x7fff, 0xff, 0x7fff, 0x1, 0x9, 0x1a63, 0x1, 0x5, 0x9, 0x893, 0x20, 0x80000001, 0x401, 0x871, 0x1ff, 0x4b3f, 0x4, 0x1, 0x6, 0xffff8000, 0x2, 0x7, 0x4, 0x2, 0x6, 0x5, 0x80000000, 0x2, 0x93, 0x12000000, 0x8000, 0xfb, 0x4, 0x35, 0x7fffffff, 0x8f061fe, 0xc8d4, 0x734, 0x2, 0x6, 0x9, 0x4, 0x6, 0x586b, 0xffffffff, 0x6f39, 0x6, 0x5588, 0x4, 0x8bf1, 0xfffffffd, 0x1, 0x10000, 0x2, 0x9, 0x1, 0x3ff, 0xe5, 0xfffffff9, 0x5, 0x1, 0xe799, 0x1, 0x1f, 0x3, 0x0, 0xec, 0x1f, 0x200, 0x7f, 0x39, 0x8, 0x1ff, 0x3b3, 0x800, 0x4, 0x1, 0xde0, 0xffff, 0x0, 0x1, 0x3ed, 0x8001, 0xffff, 0x0, 0x7fff, 0x6, 0x1000, 0x6, 0x20000, 0x1, 0x0, 0x7fff, 0xea14, 0xb9, 0xce, 0x9, 0xffffffff, 0x9, 0x6, 0x4, 0x1ff, 0x5, 0x10001, 0x101, 0x2, 0x2, 0x7, 0x5, 0x0, 0x6, 0x8, 0x101, 0xbb49, 0xfffffff9, 0x4, 0xa957, 0x4, 0x800, 0x3167f8ab, 0x400, 0x1, 0x9fc7, 0xfffffff9, 0x5, 0x2, 0x0, 0x6, 0x7fffffff, 0x40, 0x800, 0x8, 0x8001, 0x2, 0xa63, 0x5e, 0x9, 0x8001, 0x0, 0x9, 0x6, 0x9, 0x3ae9, 0x6, 0x1, 0x3, 0xfff, 0x2, 0x2, 0x200, 0xfff, 0xa3, 0x4, 0xb19, 0x0, 0x8001, 0x101, 0x0, 0x7, 0x9, 0x5, 0x35, 0x8, 0x8, 0x1, 0x3, 0x200, 0x7, 0xffff, 0x0, 0x5312, 0x20000000, 0x9, 0x5, 0x0, 0x80000000, 0x7f, 0xfffffff9, 0x643f, 0xfff, 0x0, 0x5, 0x160a9f70, 0x5, 0x9, 0x1, 0x4, 0x3, 0x2, 0x4815e7d3, 0x2, 0x5, 0xd7, 0x106, 0x7fff, 0x9, 0x100, 0x7, 0x0, 0x7, 0x80000001, 0x5, 0xe2c6, 0x10000, 0x2, 0xd14a, 0x3840, 0xfffffffb, 0x9, 0x4, 0xfffffffe, 0xbf3b, 0x1ff, 0x8001, 0x80, 0x4c7, 0x6, 0xe0, 0x101, 0x8, 0x4, 0x5, 0x81, 0x1, 0x2e, 0xf82, 0x9, 0x8, 0xff, 0x7, 0x7, 0x1668000, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x0, 0x2, {0x1, 0x2, 0x7, 0x3, 0x10, 0x87d}, {0xf1, 0x0, 0x5, 0x2ad7, 0x2, 0x8001}, 0x7, 0x0, 0xfffffffe}}]}]}}, @TCA_RATE={0x6, 0x5, {0x34, 0x1f}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) dup3(0xffffffffffffffff, r1, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000a80)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="340000002c00000426bd7000fddbdf250000000051e7c9981d29f53931a4a857b56e099b8783a11cbbc1cd8e9642c72669e58ccde80aa57d0812da5e978c7db2c5e173b4ad2192682c4053283277376558c64ba5a2a508c969c51323cbb6052c2c4fdfe420621c3c3bca16c374e948bfe2758f3328dd8e9e09d54ec4c6b33a0c82f92e3371c03a9e889d1bb795b85c6c90ef99e949a8abb60ed4badce052d687d0dc1d8700"/179, @ANYRES32=r4, @ANYBLOB="070007000c0004000d000c0008000b00030e00000600050000ee0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) unshare(0x4010000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003904000002001000000000000000", @ANYRES32=r6, @ANYBLOB="03040000000000001c0012800b00010067656e65766500000c0002800500040001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x200, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040098}, 0x40080c2) (async) sendto$inet6(r0, &(0x7f0000000080)="0561df00930000000000000088a8", 0xe, 0x0, 0x0, 0x0) 07:31:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x7400, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x7a00, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xc00e, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:24 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:24 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:24 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xfa09, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:24 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:24 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getlink={0x30, 0x12, 0x300, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x1000, 0x22000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd95b}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d4}, 0x10) 07:31:24 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:24 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xfb09, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:25 executing program 2: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:25 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getlink={0x30, 0x12, 0x300, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x1000, 0x22000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd95b}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d4}, 0x10) [ 105.872549][ T5598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5598 comm=syz-executor.3 [ 105.971584][ T5616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5616 comm=syz-executor.3 [ 105.985667][ T5615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5615 comm=syz-executor.3 07:31:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:25 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getlink={0x30, 0x12, 0x300, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x1000, 0x22000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd95b}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d4}, 0x10) 07:31:25 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:25 executing program 2: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:25 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffff45ae, 0x400080) setsockopt$inet6_tcp_int(r2, 0x6, 0xb, &(0x7f0000000200)=0x7fff, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000020000aafc295c628425bae033f9d9ad5ce6000000008d17", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0x1, &(0x7f0000000240)="a45d608b35401c846ae217ad392625086d772771f171fd1600e83cce5b707675c5d550af3218b3b8f7f2d7fe4d568aa962fd89ecc0708e60df71dde3874d452d4f657e66117764617405e69c7cd8ccb184c0021db932038d85643372eed98d4076e4c604e8cecb4b2635b253815b878eeab02b62cc5b8935b3fd197ec996c936d8a89da4a136b13873d7ab50f9713fa29705f1034995bd1db84da639c7a4ebadb7bdc2e10c928c1614bf835aca5056", &(0x7f0000000300)=@tcp=r3, 0x48de76e914626511}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x104, &(0x7f00000000c0)={@random="9ac0901ac4ec", @local, @void, {@x25={0x805, {0x0, 0x1, 0x23, "86b99a15f27d984e60abdec5e0d513e0a160acc587a6e463a2d5c5e918d18963f9a83a32c8b86391aa69244abbf22fe99aea9b59d4c73598a8ce2a1c8e0e3df7f0bacf88e5b824e598200f4f795c2959d58e3bbe1f775f33e1d7837b25ce65d9ff52d3c787dc3722f8f29aba1b2d622cd4075a5ff9e31c9a99d4b6da9733fb9c8fa3b1913309b89e7336a152e86157d5dfec7c4a105937d7bb04e2b78fadcc661302defbb44e591a40b79d577b75aad71f5c268bcf7274d1c923e6a726ee8e537c10234339617283d253e83d23acf831079eca5f23bceca42be56a01b10af30a48b8b60867dcb5c790ec2ed99be44264af37f6"}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) [ 106.793700][ T5629] validate_nla: 14 callbacks suppressed [ 106.793716][ T5629] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 106.807717][ T5629] __nla_validate_parse: 14 callbacks suppressed [ 106.807742][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.823476][ T5625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5625 comm=syz-executor.3 07:31:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:25 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffff45ae, 0x400080) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffff45ae, 0x400080) setsockopt$inet6_tcp_int(r2, 0x6, 0xb, &(0x7f0000000200)=0x7fff, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000020000aafc295c628425bae033f9d9ad5ce6000000008d17", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000020000aafc295c628425bae033f9d9ad5ce6000000008d17", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0x1, &(0x7f0000000240)="a45d608b35401c846ae217ad392625086d772771f171fd1600e83cce5b707675c5d550af3218b3b8f7f2d7fe4d568aa962fd89ecc0708e60df71dde3874d452d4f657e66117764617405e69c7cd8ccb184c0021db932038d85643372eed98d4076e4c604e8cecb4b2635b253815b878eeab02b62cc5b8935b3fd197ec996c936d8a89da4a136b13873d7ab50f9713fa29705f1034995bd1db84da639c7a4ebadb7bdc2e10c928c1614bf835aca5056", &(0x7f0000000300)=@tcp=r3, 0x48de76e914626511}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x104, &(0x7f00000000c0)={@random="9ac0901ac4ec", @local, @void, {@x25={0x805, {0x0, 0x1, 0x23, "86b99a15f27d984e60abdec5e0d513e0a160acc587a6e463a2d5c5e918d18963f9a83a32c8b86391aa69244abbf22fe99aea9b59d4c73598a8ce2a1c8e0e3df7f0bacf88e5b824e598200f4f795c2959d58e3bbe1f775f33e1d7837b25ce65d9ff52d3c787dc3722f8f29aba1b2d622cd4075a5ff9e31c9a99d4b6da9733fb9c8fa3b1913309b89e7336a152e86157d5dfec7c4a105937d7bb04e2b78fadcc661302defbb44e591a40b79d577b75aad71f5c268bcf7274d1c923e6a726ee8e537c10234339617283d253e83d23acf831079eca5f23bceca42be56a01b10af30a48b8b60867dcb5c790ec2ed99be44264af37f6"}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 07:31:25 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:25 executing program 2: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 106.858844][ T5637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5637 comm=syz-executor.3 [ 106.882566][ T5640] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 106.890916][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xe0ffff, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffff45ae, 0x400080) setsockopt$inet6_tcp_int(r2, 0x6, 0xb, &(0x7f0000000200)=0x7fff, 0x4) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000020000aafc295c628425bae033f9d9ad5ce6000000008d17", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0x1, &(0x7f0000000240)="a45d608b35401c846ae217ad392625086d772771f171fd1600e83cce5b707675c5d550af3218b3b8f7f2d7fe4d568aa962fd89ecc0708e60df71dde3874d452d4f657e66117764617405e69c7cd8ccb184c0021db932038d85643372eed98d4076e4c604e8cecb4b2635b253815b878eeab02b62cc5b8935b3fd197ec996c936d8a89da4a136b13873d7ab50f9713fa29705f1034995bd1db84da639c7a4ebadb7bdc2e10c928c1614bf835aca5056", &(0x7f0000000300)=@tcp=r3, 0x48de76e914626511}, 0x20) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 32) listen(r1, 0x0) syz_emit_ethernet(0x104, &(0x7f00000000c0)={@random="9ac0901ac4ec", @local, @void, {@x25={0x805, {0x0, 0x1, 0x23, "86b99a15f27d984e60abdec5e0d513e0a160acc587a6e463a2d5c5e918d18963f9a83a32c8b86391aa69244abbf22fe99aea9b59d4c73598a8ce2a1c8e0e3df7f0bacf88e5b824e598200f4f795c2959d58e3bbe1f775f33e1d7837b25ce65d9ff52d3c787dc3722f8f29aba1b2d622cd4075a5ff9e31c9a99d4b6da9733fb9c8fa3b1913309b89e7336a152e86157d5dfec7c4a105937d7bb04e2b78fadcc661302defbb44e591a40b79d577b75aad71f5c268bcf7274d1c923e6a726ee8e537c10234339617283d253e83d23acf831079eca5f23bceca42be56a01b10af30a48b8b60867dcb5c790ec2ed99be44264af37f6"}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) [ 106.910903][ T5646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5646 comm=syz-executor.3 07:31:26 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 106.969407][ T5654] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 106.977836][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:26 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket(0x11, 0x10000a, 0x9) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r8, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_newnexthop={0x28, 0x68, 0x4, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x4, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x5) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r5, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@delchain={0x2c, 0x65, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x3, 0x3}, {0x2, 0xb}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_delroute={0x28, 0x19, 0x8, 0x7, 0x25dfdbfd, {0xa, 0x80, 0x20, 0x1f, 0xfd, 0x0, 0xc8, 0x3, 0x3000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x1f}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 07:31:26 executing program 2: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:26 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 107.761054][ T5666] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 107.769448][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.781597][ T5667] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:26 executing program 2: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 107.805183][ T5667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5667 comm=syz-executor.3 [ 107.818460][ T5673] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 107.827074][ T5673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.836877][ T5667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5667 comm=syz-executor.3 07:31:26 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket(0x11, 0x10000a, 0x9) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r8, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_newnexthop={0x28, 0x68, 0x4, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x4, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x5) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r5, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@delchain={0x2c, 0x65, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x3, 0x3}, {0x2, 0xb}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_delroute={0x28, 0x19, 0x8, 0x7, 0x25dfdbfd, {0xa, 0x80, 0x20, 0x1f, 0xfd, 0x0, 0xc8, 0x3, 0x3000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x1f}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 107.852866][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.880673][ T5680] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 107.889065][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.931732][ T5684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5684 comm=syz-executor.3 [ 107.953524][ T5686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=5686 comm=syz-executor.3 07:31:27 executing program 2: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:27 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket(0x11, 0x10000a, 0x9) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r8, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_newnexthop={0x28, 0x68, 0x4, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x4, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x5) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r5, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@delchain={0x2c, 0x65, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x3, 0x3}, {0x2, 0xb}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_delroute={0x28, 0x19, 0x8, 0x7, 0x25dfdbfd, {0xa, 0x80, 0x20, 0x1f, 0xfd, 0x0, 0xc8, 0x3, 0x3000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x1f}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 07:31:27 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 108.720292][ T5693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.737505][ T5696] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 108.745881][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xc0}}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x40}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46401}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)={0xe4, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x240040c0}, 0x94) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x1c4}, {&(0x7f0000000280)=""/85, 0x184}, {&(0x7f0000000fc0)=""/4096, 0x5a8}, {&(0x7f0000000400)=""/106, 0x68c}, {&(0x7f0000000740)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x38}, {&(0x7f00000007c0)=""/154, 0x153}, {&(0x7f0000000100)=""/16, 0x1ad}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 07:31:27 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:27 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xc0}}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x40}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46401}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)={0xe4, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x240040c0}, 0x94) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x1c4}, {&(0x7f0000000280)=""/85, 0x184}, {&(0x7f0000000fc0)=""/4096, 0x5a8}, {&(0x7f0000000400)=""/106, 0x68c}, {&(0x7f0000000740)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x38}, {&(0x7f00000007c0)=""/154, 0x153}, {&(0x7f0000000100)=""/16, 0x1ad}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 07:31:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:27 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 108.786496][ T5703] netlink: 'syz-executor.4': attribute type 195 has an invalid length. 07:31:27 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xc0}}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x40}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46401}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)={0xe4, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x240040c0}, 0x94) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x1c4}, {&(0x7f0000000280)=""/85, 0x184}, {&(0x7f0000000fc0)=""/4096, 0x5a8}, {&(0x7f0000000400)=""/106, 0x68c}, {&(0x7f0000000740)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x38}, {&(0x7f00000007c0)=""/154, 0x153}, {&(0x7f0000000100)=""/16, 0x1ad}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 07:31:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) [ 108.862739][ T5719] netlink: 'syz-executor.4': attribute type 195 has an invalid length. 07:31:28 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x108000000) 07:31:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:28 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="100000005304005f1a18854e00000000000061a38f944b4671c579be34ce1f259cfd33823ce2b8d5a440b521ce087e0febb5974195854f27bd4e48984f12b3888d"], 0x10}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x5e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000050c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f00000051c0)=0xe8) r5 = openat(0xffffffffffffffff, &(0x7f0000005200)='./file0\x00', 0x101842, 0x41) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005240), 0x8800, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000005280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r11 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000052c0)='io.pressure\x00', 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)="1524f068b16c0ea017e78cca66642d351193d8b55319295341d1cc1e9d1a12f317d9fbd5f30d7a30ba3706d107aa8570ba05f760ef6965e48077a8d87f7f481d6fd604c70852b5a9728c09d2003a04aa00852ad8bd4562939d743257891e5cb91c5898d52cf78d0f523d51383d8c553a526d32c2c3c0fdc9767d86413e51240ea0455bce675ef7f913cfde9de5b93ecb370cf1db436db45337e4cdb163ad9f59aab31af538a464512eac55e60d223b0654436f27840d980ff74800f7a896319cc70ee83c9057297a8d91df9d397a79da6093f64941b2ac39e976d1835802e364a0c9fac89de1b443466e", 0xea}, {&(0x7f0000000480)="33c7b62d061dbfe4f9c5165b4ce9602fd7efca4308957fd3448ea00cdcf764fe76edc57bbcaffc", 0x27}, {&(0x7f00000004c0)="054ca11908d0dcb63f857d0b559c83ad0f9407df47efd7f0287b20d65112a86e5c83dfc5e8be560e5e1ff219c6e5d8d5cab5f4eaea4625f0e284e7ac452a68bc4db84433cccde39bf80c396c3dcc7a86400dbfbba31b7579f7796a6e84e130f13efbc251cec7895473a406b73965d274d8f9f65b699b0b4e177c178d3369cba8131b54a366f1221dc6b88b7e0a0b74c235ffe38be046c636e17625475284034337c6c92591a3b73d6483e6", 0xab}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x1}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000680)="18a13a529e7a77c368adc13b5f4ba8c18dd050e1599c275f8c5e4b30b629e2f66bee72a2ecb4b0aa7721aaed2d4986c9e3f4cbbeea1a2e97e114", 0x3a}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}], 0x20, 0x4}}, {{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="7f12d349e0c513acb40a514554a7838225ea08bbe2a76b7148ddb03cae12b9cd0adef349ecd2ec4cf08c0e92e91caa7540f9123325e82450fb8a27c7", 0x3c}, {&(0x7f00000018c0)="ba8d05da157e26f9e3fced600acf55f044aa49be6b00535aaf2e758e92e3ae035de3f11143059c1fcb0b4dfa3f9ae4a8ffd371737625e86687e724ea7e4509497e5d6bcd43d5", 0x46}, {&(0x7f0000001940)="d7de04e4d77384a271fab7d7507af2f124c8076f74c424a3ae745c8b8f060835add88aade0ba5179c00ad9486f7de6334292067bc5f8fc6410ec0c3da7a3c7e648504cd5b2333742f1b7724dbf099bfe25cb0530eeb01d4eff1344da89194afcc908", 0x62}, {&(0x7f00000019c0)="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", 0x1000}], 0x5, &(0x7f0000002b40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x24000040}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="2692a6aa249b72467e99987a1f1a00fba89d411cbbf7b940182d44e4546edc7d861d75abefbffb1ff9654572978cf4f7b6d2ae433f93fdb894024fdf76aafbe71a390eb83335c167e460c3862db0a8deab611c59ace43724b882acef085621651a0f66f4c6353ef3384fe2aa22ae9567d43cea22c8b1ffd69983dc819e2f65a3487a9f628f6ec6607f3d26586c4ba0f26ddb81f535b44b7380927cd37b433953370f1e57a78e6f2ed6d591a2e3b55eda5948034cbb2165df7068f3ce694bb3c94cf20f76650a6cd23c0af01f70db54bba837158ec2df6e272f37", 0xda}, {&(0x7f0000003d40)="7a6ed7f3603efac9ef50c90adc949d9dbc107a7c621580d8f6f90f451598a67aea2592f4746672d88c6fbd65", 0x2c}], 0x3, &(0x7f0000005300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @rights={{0x30, 0x1, 0x1, [r7, r8, r3, r9, r3, r10, r11, r1]}}], 0xd8, 0x4000000}}], 0x4, 0x20000801) open(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r12, 0x0, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000000)=0x54) 07:31:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:28 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:28 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:28 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:28 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 109.719913][ T5743] netlink: 'syz-executor.4': attribute type 195 has an invalid length. 07:31:28 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:28 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x108000000) 07:31:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="100000005304005f1a18854e00000000000061a38f944b4671c579be34ce1f259cfd33823ce2b8d5a440b521ce087e0febb5974195854f27bd4e48984f12b3888d"], 0x10}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x5e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) unshare(0x40000400) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000050c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f00000051c0)=0xe8) (async) r5 = openat(0xffffffffffffffff, &(0x7f0000005200)='./file0\x00', 0x101842, 0x41) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005240), 0x8800, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000005280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) (async) r11 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000052c0)='io.pressure\x00', 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)="1524f068b16c0ea017e78cca66642d351193d8b55319295341d1cc1e9d1a12f317d9fbd5f30d7a30ba3706d107aa8570ba05f760ef6965e48077a8d87f7f481d6fd604c70852b5a9728c09d2003a04aa00852ad8bd4562939d743257891e5cb91c5898d52cf78d0f523d51383d8c553a526d32c2c3c0fdc9767d86413e51240ea0455bce675ef7f913cfde9de5b93ecb370cf1db436db45337e4cdb163ad9f59aab31af538a464512eac55e60d223b0654436f27840d980ff74800f7a896319cc70ee83c9057297a8d91df9d397a79da6093f64941b2ac39e976d1835802e364a0c9fac89de1b443466e", 0xea}, {&(0x7f0000000480)="33c7b62d061dbfe4f9c5165b4ce9602fd7efca4308957fd3448ea00cdcf764fe76edc57bbcaffc", 0x27}, {&(0x7f00000004c0)="054ca11908d0dcb63f857d0b559c83ad0f9407df47efd7f0287b20d65112a86e5c83dfc5e8be560e5e1ff219c6e5d8d5cab5f4eaea4625f0e284e7ac452a68bc4db84433cccde39bf80c396c3dcc7a86400dbfbba31b7579f7796a6e84e130f13efbc251cec7895473a406b73965d274d8f9f65b699b0b4e177c178d3369cba8131b54a366f1221dc6b88b7e0a0b74c235ffe38be046c636e17625475284034337c6c92591a3b73d6483e6", 0xab}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x1}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000680)="18a13a529e7a77c368adc13b5f4ba8c18dd050e1599c275f8c5e4b30b629e2f66bee72a2ecb4b0aa7721aaed2d4986c9e3f4cbbeea1a2e97e114", 0x3a}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}], 0x20, 0x4}}, {{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="7f12d349e0c513acb40a514554a7838225ea08bbe2a76b7148ddb03cae12b9cd0adef349ecd2ec4cf08c0e92e91caa7540f9123325e82450fb8a27c7", 0x3c}, {&(0x7f00000018c0)="ba8d05da157e26f9e3fced600acf55f044aa49be6b00535aaf2e758e92e3ae035de3f11143059c1fcb0b4dfa3f9ae4a8ffd371737625e86687e724ea7e4509497e5d6bcd43d5", 0x46}, {&(0x7f0000001940)="d7de04e4d77384a271fab7d7507af2f124c8076f74c424a3ae745c8b8f060835add88aade0ba5179c00ad9486f7de6334292067bc5f8fc6410ec0c3da7a3c7e648504cd5b2333742f1b7724dbf099bfe25cb0530eeb01d4eff1344da89194afcc908", 0x62}, {&(0x7f00000019c0)="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", 0x1000}], 0x5, &(0x7f0000002b40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x24000040}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="2692a6aa249b72467e99987a1f1a00fba89d411cbbf7b940182d44e4546edc7d861d75abefbffb1ff9654572978cf4f7b6d2ae433f93fdb894024fdf76aafbe71a390eb83335c167e460c3862db0a8deab611c59ace43724b882acef085621651a0f66f4c6353ef3384fe2aa22ae9567d43cea22c8b1ffd69983dc819e2f65a3487a9f628f6ec6607f3d26586c4ba0f26ddb81f535b44b7380927cd37b433953370f1e57a78e6f2ed6d591a2e3b55eda5948034cbb2165df7068f3ce694bb3c94cf20f76650a6cd23c0af01f70db54bba837158ec2df6e272f37", 0xda}, {&(0x7f0000003d40)="7a6ed7f3603efac9ef50c90adc949d9dbc107a7c621580d8f6f90f451598a67aea2592f4746672d88c6fbd65", 0x2c}], 0x3, &(0x7f0000005300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @rights={{0x30, 0x1, 0x1, [r7, r8, r3, r9, r3, r10, r11, r1]}}], 0xd8, 0x4000000}}], 0x4, 0x20000801) open(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r12, 0x0, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000000)=0x54) 07:31:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:29 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:29 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:29 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:29 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x108000000) 07:31:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xb000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="100000005304005f1a18854e00000000000061a38f944b4671c579be34ce1f259cfd33823ce2b8d5a440b521ce087e0febb5974195854f27bd4e48984f12b3888d"], 0x10}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x5e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000050c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f00000051c0)=0xe8) r5 = openat(0xffffffffffffffff, &(0x7f0000005200)='./file0\x00', 0x101842, 0x41) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005240), 0x8800, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000005280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r11 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000052c0)='io.pressure\x00', 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)="1524f068b16c0ea017e78cca66642d351193d8b55319295341d1cc1e9d1a12f317d9fbd5f30d7a30ba3706d107aa8570ba05f760ef6965e48077a8d87f7f481d6fd604c70852b5a9728c09d2003a04aa00852ad8bd4562939d743257891e5cb91c5898d52cf78d0f523d51383d8c553a526d32c2c3c0fdc9767d86413e51240ea0455bce675ef7f913cfde9de5b93ecb370cf1db436db45337e4cdb163ad9f59aab31af538a464512eac55e60d223b0654436f27840d980ff74800f7a896319cc70ee83c9057297a8d91df9d397a79da6093f64941b2ac39e976d1835802e364a0c9fac89de1b443466e", 0xea}, {&(0x7f0000000480)="33c7b62d061dbfe4f9c5165b4ce9602fd7efca4308957fd3448ea00cdcf764fe76edc57bbcaffc", 0x27}, {&(0x7f00000004c0)="054ca11908d0dcb63f857d0b559c83ad0f9407df47efd7f0287b20d65112a86e5c83dfc5e8be560e5e1ff219c6e5d8d5cab5f4eaea4625f0e284e7ac452a68bc4db84433cccde39bf80c396c3dcc7a86400dbfbba31b7579f7796a6e84e130f13efbc251cec7895473a406b73965d274d8f9f65b699b0b4e177c178d3369cba8131b54a366f1221dc6b88b7e0a0b74c235ffe38be046c636e17625475284034337c6c92591a3b73d6483e6", 0xab}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x1}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000680)="18a13a529e7a77c368adc13b5f4ba8c18dd050e1599c275f8c5e4b30b629e2f66bee72a2ecb4b0aa7721aaed2d4986c9e3f4cbbeea1a2e97e114", 0x3a}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}], 0x20, 0x4}}, {{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="7f12d349e0c513acb40a514554a7838225ea08bbe2a76b7148ddb03cae12b9cd0adef349ecd2ec4cf08c0e92e91caa7540f9123325e82450fb8a27c7", 0x3c}, {&(0x7f00000018c0)="ba8d05da157e26f9e3fced600acf55f044aa49be6b00535aaf2e758e92e3ae035de3f11143059c1fcb0b4dfa3f9ae4a8ffd371737625e86687e724ea7e4509497e5d6bcd43d5", 0x46}, {&(0x7f0000001940)="d7de04e4d77384a271fab7d7507af2f124c8076f74c424a3ae745c8b8f060835add88aade0ba5179c00ad9486f7de6334292067bc5f8fc6410ec0c3da7a3c7e648504cd5b2333742f1b7724dbf099bfe25cb0530eeb01d4eff1344da89194afcc908", 0x62}, {&(0x7f00000019c0)="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", 0x1000}], 0x5, &(0x7f0000002b40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x24000040}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="2692a6aa249b72467e99987a1f1a00fba89d411cbbf7b940182d44e4546edc7d861d75abefbffb1ff9654572978cf4f7b6d2ae433f93fdb894024fdf76aafbe71a390eb83335c167e460c3862db0a8deab611c59ace43724b882acef085621651a0f66f4c6353ef3384fe2aa22ae9567d43cea22c8b1ffd69983dc819e2f65a3487a9f628f6ec6607f3d26586c4ba0f26ddb81f535b44b7380927cd37b433953370f1e57a78e6f2ed6d591a2e3b55eda5948034cbb2165df7068f3ce694bb3c94cf20f76650a6cd23c0af01f70db54bba837158ec2df6e272f37", 0xda}, {&(0x7f0000003d40)="7a6ed7f3603efac9ef50c90adc949d9dbc107a7c621580d8f6f90f451598a67aea2592f4746672d88c6fbd65", 0x2c}], 0x3, &(0x7f0000005300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @rights={{0x30, 0x1, 0x1, [r7, r8, r3, r9, r3, r10, r11, r1]}}], 0xd8, 0x4000000}}], 0x4, 0x20000801) (async) open(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r12, 0x0, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000000)=0x54) 07:31:29 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xd000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:29 executing program 3: syz_clone(0x40002100, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x75, 0x7, 0x9, 0x3, 0x0, 0x3, 0x20010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x1b3a, 0x3}, 0xc2030d80b957617d, 0x9, 0x1, 0xa, 0x1000, 0x8, 0xfff, 0x0, 0x7, 0x0, 0x1}, r0, 0xa, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x59, 0x3f, 0xfd, 0x0, 0x5, 0x4008, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext, 0x8000, 0xb5, 0x5, 0x6, 0x5, 0x7, 0x7, 0x0, 0x7fff, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x501200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)=0x80000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="094237fce82b73409b3317b2e4195609f2a8027865b518b87a25c3d05293345401471007002b13822b03137b93cd75394e03590c6a1b801060245e002b2ad8457235b46c6ae02577879adab281c74c368d51d96db3a360e9f128aaf150486d64c81dad24c64bbd6b610ba24a158f95c58f95695e2ac7c304775ce9c34ba416813dd9abc32b8d2f48249d2be01350c531e8034e07d9ec735ae54c9e008995df94a7c2b5178fe8d307f70f3edc55479368350ac6c9be9ebb8f9f29c3", 0xbb}, {&(0x7f0000003c80)="abe4afa99916765bf1007e0d3d7141cb69b3b7ee2a7a2c9b338a53b11949483da615f304d3c5ea8faf0862f8edf21ce7b61e1869fa2b0033260a8c442584dc941a53426931a8e5b0d4bf7a055c5cde569cbe9e4a", 0x54}, {&(0x7f0000003d00)="a31331730c473b16203cbda3d5ff3f164b62bd26162a2c99d282f282ea9bee13c44691e9e063848fc56abb2cfdbae5bb7ab4a385a9b02c1b27c59e42aee78e87483d0e1fff3c6d4f0aecea877aa688", 0x4f}, {&(0x7f0000003d80)="3f36313537e1cb7e27f7a8226578e454479f0f6edface7747ccce7d020540995e47a89f234d1c52fe8a89efdb2f150cbcc6605280fca1950fe13e2c0f2e5c9cfeddcc661c4f9d394e02132282c8eae65729122f252665a95ddb9a173d99f21c7661984e5cc0690fd05b38b", 0x6b}], 0x5}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc020660b, &(0x7f0000000040)=0x8502) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000440)) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x660c, 0x0) 07:31:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:29 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:29 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:29 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:29 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:29 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:29 executing program 0: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:30 executing program 3: syz_clone(0x40002100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpid() (async, rerun: 32) r0 = gettid() (rerun: 32) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x75, 0x7, 0x9, 0x3, 0x0, 0x3, 0x20010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x1b3a, 0x3}, 0xc2030d80b957617d, 0x9, 0x1, 0xa, 0x1000, 0x8, 0xfff, 0x0, 0x7, 0x0, 0x1}, r0, 0xa, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x59, 0x3f, 0xfd, 0x0, 0x5, 0x4008, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext, 0x8000, 0xb5, 0x5, 0x6, 0x5, 0x7, 0x7, 0x0, 0x7fff, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) (async) close(r1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x501200, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)=0x80000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="094237fce82b73409b3317b2e4195609f2a8027865b518b87a25c3d05293345401471007002b13822b03137b93cd75394e03590c6a1b801060245e002b2ad8457235b46c6ae02577879adab281c74c368d51d96db3a360e9f128aaf150486d64c81dad24c64bbd6b610ba24a158f95c58f95695e2ac7c304775ce9c34ba416813dd9abc32b8d2f48249d2be01350c531e8034e07d9ec735ae54c9e008995df94a7c2b5178fe8d307f70f3edc55479368350ac6c9be9ebb8f9f29c3", 0xbb}, {&(0x7f0000003c80)="abe4afa99916765bf1007e0d3d7141cb69b3b7ee2a7a2c9b338a53b11949483da615f304d3c5ea8faf0862f8edf21ce7b61e1869fa2b0033260a8c442584dc941a53426931a8e5b0d4bf7a055c5cde569cbe9e4a", 0x54}, {&(0x7f0000003d00)="a31331730c473b16203cbda3d5ff3f164b62bd26162a2c99d282f282ea9bee13c44691e9e063848fc56abb2cfdbae5bb7ab4a385a9b02c1b27c59e42aee78e87483d0e1fff3c6d4f0aecea877aa688", 0x4f}, {&(0x7f0000003d80)="3f36313537e1cb7e27f7a8226578e454479f0f6edface7747ccce7d020540995e47a89f234d1c52fe8a89efdb2f150cbcc6605280fca1950fe13e2c0f2e5c9cfeddcc661c4f9d394e02132282c8eae65729122f252665a95ddb9a173d99f21c7661984e5cc0690fd05b38b", 0x6b}], 0x5}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc020660b, &(0x7f0000000040)=0x8502) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000440)) (async) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x660c, 0x0) (rerun: 32) 07:31:30 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:30 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x11000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:30 executing program 0: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x12000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x14000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x25000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:30 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:30 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:30 executing program 3: syz_clone(0x40002100, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() (async) r0 = gettid() perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x75, 0x7, 0x9, 0x3, 0x0, 0x3, 0x20010, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x1b3a, 0x3}, 0xc2030d80b957617d, 0x9, 0x1, 0xa, 0x1000, 0x8, 0xfff, 0x0, 0x7, 0x0, 0x1}, r0, 0xa, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x59, 0x3f, 0xfd, 0x0, 0x5, 0x4008, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext, 0x8000, 0xb5, 0x5, 0x6, 0x5, 0x7, 0x7, 0x0, 0x7fff, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) (async) close(r1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x501200, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)=0x80000) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="094237fce82b73409b3317b2e4195609f2a8027865b518b87a25c3d05293345401471007002b13822b03137b93cd75394e03590c6a1b801060245e002b2ad8457235b46c6ae02577879adab281c74c368d51d96db3a360e9f128aaf150486d64c81dad24c64bbd6b610ba24a158f95c58f95695e2ac7c304775ce9c34ba416813dd9abc32b8d2f48249d2be01350c531e8034e07d9ec735ae54c9e008995df94a7c2b5178fe8d307f70f3edc55479368350ac6c9be9ebb8f9f29c3", 0xbb}, {&(0x7f0000003c80)="abe4afa99916765bf1007e0d3d7141cb69b3b7ee2a7a2c9b338a53b11949483da615f304d3c5ea8faf0862f8edf21ce7b61e1869fa2b0033260a8c442584dc941a53426931a8e5b0d4bf7a055c5cde569cbe9e4a", 0x54}, {&(0x7f0000003d00)="a31331730c473b16203cbda3d5ff3f164b62bd26162a2c99d282f282ea9bee13c44691e9e063848fc56abb2cfdbae5bb7ab4a385a9b02c1b27c59e42aee78e87483d0e1fff3c6d4f0aecea877aa688", 0x4f}, {&(0x7f0000003d80)="3f36313537e1cb7e27f7a8226578e454479f0f6edface7747ccce7d020540995e47a89f234d1c52fe8a89efdb2f150cbcc6605280fca1950fe13e2c0f2e5c9cfeddcc661c4f9d394e02132282c8eae65729122f252665a95ddb9a173d99f21c7661984e5cc0690fd05b38b", 0x6b}], 0x5}, 0x80) (rerun: 32) openat$cgroup_ro(r4, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc020660b, &(0x7f0000000040)=0x8502) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000440)) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x660c, 0x0) 07:31:30 executing program 0: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x34000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:30 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:30 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x46010000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 111.912157][ T5867] validate_nla: 13 callbacks suppressed [ 111.912172][ T5867] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 111.926702][ T5867] __nla_validate_parse: 16 callbacks suppressed [ 111.926714][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:31 executing program 0: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x48000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 111.961751][ T5875] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 111.970229][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x44, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x12}]}, @IFLA_TXQLEN={0x8}]}, 0x44}}, 0x0) io_setup(0xffff, &(0x7f00000000c0)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x92, &(0x7f0000000000)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x92, &(0x7f0000000000)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) io_submit(r4, 0x3, &(0x7f0000000d40)=[&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000400)="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", 0x104, 0x80000000, 0x0, 0x3, r3}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0x2, r5, &(0x7f0000000b00)="4d417b5bdbce13e810a96fabcccd0240a5ae3ebd42334d295ef4b2638ebe2a520972229a44ae8a8014c6037868d9a549fdc519ed9bda9adaebd7094226b58bee98e14d067fba488bf98dafc65af56b0efb6a75f963b7b6fd32b2f583ecb6dcfd91bf3eda80ab367df198f981075b81aac3d861f180f790d2d29c7bc404d47ef55cddc5831e1230d2e7b3f1db50b73f0a292325c718c8839efb87a976aa0494", 0x9f, 0x9, 0x0, 0x1}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x4, r6, &(0x7f0000000c40)="9bc758521c9eeda438f56f5795aca2287feb3cc3be9b0cf95d139de88e4e98b1e20d29eea5ecd27bc48c12ddfb91f55bfc8f9801ef41c3bb8f5c50c465f20d1117fcfb558712b043b639831b21a985e22e1664b5ed6a67e969724b650afe93dddb06b65653bf4f430e49a53e440954e3bea83959532a04ba7522b1ae3e4becae44252e7c7d52c9ede2d9b7fc93a8b64bb44c70f79cb49a3c0b3626", 0x9b, 0x9, 0x0, 0x3, r3}]) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x446200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x4}}, './file0\x00'}) socket$igmp(0x2, 0x3, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, 0x0, 0xda00) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000080e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x92, &(0x7f0000000000)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, 0x0, 0xda00) io_setup(0x3, &(0x7f00000004c0)=0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r11, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r12, &(0x7f0000000000)='-7', 0x2}]) write$P9_RWALK(r12, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x20, 0x0, 0x6}, {0x2, 0x3, 0x6}]}}, 0x23) eventfd(0x0) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x4c000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 112.024300][ T5883] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 112.032692][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.055516][ T5889] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. 07:31:31 executing program 0: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 112.072337][ T5891] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 112.080694][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 0: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x44, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x12}]}, @IFLA_TXQLEN={0x8}]}, 0x44}}, 0x0) io_setup(0xffff, &(0x7f00000000c0)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x92, &(0x7f0000000000)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x92, &(0x7f0000000000)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) io_submit(r4, 0x3, &(0x7f0000000d40)=[&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000400)="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", 0x104, 0x80000000, 0x0, 0x3, r3}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0x2, r5, &(0x7f0000000b00)="4d417b5bdbce13e810a96fabcccd0240a5ae3ebd42334d295ef4b2638ebe2a520972229a44ae8a8014c6037868d9a549fdc519ed9bda9adaebd7094226b58bee98e14d067fba488bf98dafc65af56b0efb6a75f963b7b6fd32b2f583ecb6dcfd91bf3eda80ab367df198f981075b81aac3d861f180f790d2d29c7bc404d47ef55cddc5831e1230d2e7b3f1db50b73f0a292325c718c8839efb87a976aa0494", 0x9f, 0x9, 0x0, 0x1}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x4, r6, &(0x7f0000000c40)="9bc758521c9eeda438f56f5795aca2287feb3cc3be9b0cf95d139de88e4e98b1e20d29eea5ecd27bc48c12ddfb91f55bfc8f9801ef41c3bb8f5c50c465f20d1117fcfb558712b043b639831b21a985e22e1664b5ed6a67e969724b650afe93dddb06b65653bf4f430e49a53e440954e3bea83959532a04ba7522b1ae3e4becae44252e7c7d52c9ede2d9b7fc93a8b64bb44c70f79cb49a3c0b3626", 0x9b, 0x9, 0x0, 0x3, r3}]) (async) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x446200, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40001) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x4}}, './file0\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, 0x0, 0xda00) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000080e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x92, &(0x7f0000000000)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, 0x0, 0xda00) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r11, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r12, &(0x7f0000000000)='-7', 0x2}]) write$P9_RWALK(r12, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x20, 0x0, 0x6}, {0x2, 0x3, 0x6}]}}, 0x23) (async) eventfd(0x0) [ 112.116833][ T5895] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 112.125839][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.148216][ T5899] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 112.157009][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:31 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x74000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 112.203059][ T5908] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 112.232812][ T5914] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 112.241226][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 112.276538][ T5919] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 112.284943][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x44, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x12}]}, @IFLA_TXQLEN={0x8}]}, 0x44}}, 0x0) (async) io_setup(0xffff, &(0x7f00000000c0)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x92, &(0x7f0000000000)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x92, &(0x7f0000000000)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) io_submit(r4, 0x3, &(0x7f0000000d40)=[&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000400)="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", 0x104, 0x80000000, 0x0, 0x3, r3}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0x2, r5, &(0x7f0000000b00)="4d417b5bdbce13e810a96fabcccd0240a5ae3ebd42334d295ef4b2638ebe2a520972229a44ae8a8014c6037868d9a549fdc519ed9bda9adaebd7094226b58bee98e14d067fba488bf98dafc65af56b0efb6a75f963b7b6fd32b2f583ecb6dcfd91bf3eda80ab367df198f981075b81aac3d861f180f790d2d29c7bc404d47ef55cddc5831e1230d2e7b3f1db50b73f0a292325c718c8839efb87a976aa0494", 0x9f, 0x9, 0x0, 0x1}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x4, r6, &(0x7f0000000c40)="9bc758521c9eeda438f56f5795aca2287feb3cc3be9b0cf95d139de88e4e98b1e20d29eea5ecd27bc48c12ddfb91f55bfc8f9801ef41c3bb8f5c50c465f20d1117fcfb558712b043b639831b21a985e22e1664b5ed6a67e969724b650afe93dddb06b65653bf4f430e49a53e440954e3bea83959532a04ba7522b1ae3e4becae44252e7c7d52c9ede2d9b7fc93a8b64bb44c70f79cb49a3c0b3626", 0x9b, 0x9, 0x0, 0x3, r3}]) (async) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x446200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x4}}, './file0\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, 0x0, 0xda00) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000080e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x92, &(0x7f0000000000)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, 0x0, 0xda00) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r11, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r12, &(0x7f0000000000)='-7', 0x2}]) write$P9_RWALK(r12, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x20, 0x0, 0x6}, {0x2, 0x3, 0x6}]}}, 0x23) (async) eventfd(0x0) 07:31:31 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xc00e0000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 112.324136][ T5930] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 112.332529][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 112.405992][ T5944] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 112.423735][ T5942] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 112.432439][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xfa090000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xfb090000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 1: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@uname={'uname', 0x3d, '\x00'}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xffffff0000000000) r3 = accept4$unix(r1, 0x0, &(0x7f00000000c0), 0x80000) dup3(0xffffffffffffffff, r3, 0x80000) r4 = epoll_create1(0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x109000, 0x1) r6 = epoll_create1(0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xc000001c}) epoll_pwait(r6, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) epoll_wait(r6, &(0x7f0000000240)=[{}], 0x1, 0x401) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r9 = memfd_secret(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000100)={0x30000014}) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r5, &(0x7f0000000400)="635d963be3c17f152e90fe2d50ace8655dfe23cb471a390345d10ac05cccab404203a980b37dfc8bd4", 0x29, 0x40000, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r9}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f00000003c0)={0xc}) ppoll(&(0x7f0000000040)=[{r4, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xffffe000, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0xa, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0xf, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@uname={'uname', 0x3d, '\x00'}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) (async) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xffffff0000000000) (async, rerun: 32) r3 = accept4$unix(r1, 0x0, &(0x7f00000000c0), 0x80000) dup3(0xffffffffffffffff, r3, 0x80000) (async, rerun: 32) r4 = epoll_create1(0x0) (async, rerun: 32) r5 = open(&(0x7f0000000000)='./file0\x00', 0x109000, 0x1) r6 = epoll_create1(0x0) (async, rerun: 64) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xc000001c}) (async, rerun: 32) epoll_pwait(r6, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) (async) epoll_wait(r6, &(0x7f0000000240)=[{}], 0x1, 0x401) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) r9 = memfd_secret(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000100)={0x30000014}) (async, rerun: 32) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendto$inet6(r5, &(0x7f0000000400)="635d963be3c17f152e90fe2d50ace8655dfe23cb471a390345d10ac05cccab404203a980b37dfc8bd4", 0x29, 0x40000, 0x0, 0x0) (async, rerun: 32) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r9}, 0x8) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f00000003c0)={0xc}) ppoll(&(0x7f0000000040)=[{r4, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) 07:31:31 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 112.607795][ T27] audit: type=1400 audit(1695627091.685:302): avc: denied { accept } for pid=5978 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 112.629131][ T27] audit: type=1400 audit(1695627091.695:303): avc: denied { block_suspend } for pid=5978 comm="syz-executor.3" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x10, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x25, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:31 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@uname={'uname', 0x3d, '\x00'}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@uname={'uname', 0x3d, '\x00'}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xffffff0000000000) accept4$unix(r1, 0x0, &(0x7f00000000c0), 0x80000) (async) r3 = accept4$unix(r1, 0x0, &(0x7f00000000c0), 0x80000) dup3(0xffffffffffffffff, r3, 0x80000) epoll_create1(0x0) (async) r4 = epoll_create1(0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x109000, 0x1) r6 = epoll_create1(0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xc000001c}) epoll_pwait(r6, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) epoll_wait(r6, &(0x7f0000000240)=[{}], 0x1, 0x401) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) memfd_secret(0x80000) (async) r9 = memfd_secret(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000100)={0x30000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000100)={0x30000014}) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r5, &(0x7f0000000400)="635d963be3c17f152e90fe2d50ace8655dfe23cb471a390345d10ac05cccab404203a980b37dfc8bd4", 0x29, 0x40000, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r9}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f00000003c0)={0xc}) ppoll(&(0x7f0000000040)=[{r4, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x30, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x31, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:31 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)="89123558655f999200a603000d59e8752f0696c6b2611ca29f25d8ecd29ba04bb9f9a59ac68681a96b548ac3124a1b0e885019b55675201980adc819a9805b7da318579d5dcebabb36405bfbb6bd128f", 0x50}, {&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="8be0992c373f6878cb796068fdf87495276dc3500d5ae21f3762c15937d08f7b5b52b0777715e84936d84e03bd8545dd85c543251766eb2be74c0df6a73cd303fc6eb1e119079db4a7cd570e08e74d274c3cba11d30b6f725a307705731e34a23846ea8c6b584a1a3dc77f75f0458d", 0x6f}, {&(0x7f0000001140)="e2e82bfefb2b9abd63579b74fbfd7cc1952fbdacf0f0ab1eb4fcdca51a416a5b644c1d6044a4a03a0bcf3ac5b5cd60aefdbc3ba4eb2dc8ba57d14db03bfa116c33bb5d3b21b7a84890bd886f7f4874dd79476ea5a5236228d584ce6d12a37ebb435ec9d8", 0x64}, {&(0x7f00000011c0)="6c8f9502cefd76d3f17dd1bc97a60da3f6a4bb99c5c3325557c7977f9aea87b76b12ec1e1eb40c5e479f21a11b1262b6bdcfa3aecf8972f204da6f9bc9c3aa6870f55d738de133cf26ff12013b01716ba8d8ea86c9ab1574c95d58a8ccfaaa7dc87459a3caabf8548306b26348d275e757bd726569f8fe801f9f13f11b006635403a6a771414e934f2573d977824b451c19e25acf61b79c1736db555ff5f897ee8649646c5793fd7a39843c75628741208deea71efba76a475619d2a388521f2599e0a494402ba7ccc9e9497965dbb7dd9a6f443f879016a52a58e38e90e4b8c9470b97c27d27bf04a48", 0xea}], 0x5) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000001340), 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001380)={@initdev, @dev}, &(0x7f00000013c0)=0xc) io_setup(0x3, &(0x7f00000004c0)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000001400)={'\x00', 0x5, 0x3, 0x80000000}) 07:31:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x32, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:32 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:32 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:32 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)="89123558655f999200a603000d59e8752f0696c6b2611ca29f25d8ecd29ba04bb9f9a59ac68681a96b548ac3124a1b0e885019b55675201980adc819a9805b7da318579d5dcebabb36405bfbb6bd128f", 0x50}, {&(0x7f00000000c0)="d575c2997940e2d11474d6f366c2b947c275a093ec1113dc0bdfd8340b3bb51c6dd9afb18b55fa43629c253780a164abb0a1e4c16989da0bb86fe4e1ad88367e3306cba587f798e34733ed67db9c323ec70dc4a526b3ebaa04b76a5897c8976bd06f17e4e3ce7e5efaf91ce3ebb2c57c758a85dd65bc13a3b74a53fedc9cc5a06e821adca9da61be0f2742f5a945d023bb9a70dd359eacdaa50f6abf2dcfe55192a42478b1fc900c9bc58ddbd67d597c7f733c8d10bb3f8a0c7a93cb6a6e6bad07cd1c10fbf182e5523013ed6b99c182c578aadf4ed503177576ba466a7fcc2ef2550ec3313fdfb4f3ae9a461b2506dd60eacdb5e6a935edbab158624d7fd25e5605d68b7b84c0580be7a98b47a46dab7183d4ecac09afd97f09fc2f1eea5e4c0572459d32d8c0329a2033c2e1f4611b9ab39ea4b7f889b30a76d3fe3c0ce40707064f33d47375358d0215e7af3c25fcef01128b06f001e790eab58276ca2eda6801463e26185e8a28b8c93edd07b75edf2c54d4e1e6b8130458ce80b94ea4eedfd320c1c0273c29d24748804e89852afd6ca6e624c3136503e031035275f01066bf44f091b39a38af94e7dac02c007f0b3f5a73941ce7ab4805cd0b503f5feaaafd5f4ab05a5daebdf81a6f867200c3a7fd3e2b7c8d5694182efdb5ac44b5c041b7152f63063f8b6519f9022b772d24ac076230b2228f4bb0dbb026523754adf9a15bc8ef260545199d2fa9ec60b52bc4b59f688b2187c16564d01ebb4e3b345ed39f778cd2e29bac1aa947e9178ff8128cf4ee0987628444e53b424b320e177210d3b72565c0a35d8ad151a255648265d5c10a6914ce71eb4a15a55caddcfa72b19a8bcce9c2155b66dd1b452f11f14f0894325039f46a6900ecd479922325388fdddf29dc291bb02a8f4e211df9548fc4958a4a9b32f498b728f5098507b931c9122edebca65b98f1470d9f85b4b71e2a656aa47c5d9ff019ed7ea25897d1ee23233e42137be1a564e8b9bd15bbd57430dac406c4fe15f911f7f70c4b136e46c2d9e705de4b65bb5a24a6fa7d67715bb1954acd0fe1e59bcfd827d111c9c0c8d180132d432e2a113db686a3abb3d421362f6c832fb112c0ad699918570dbcf9e1c69a590d07daf279523bb77cd000ad08b2ee4c8fea5711676114c7b646824d214f252ee83b5632df2b5768510f6e023fc6ba615b527b54b5ed1fd075b4ba883c603d8f2a6dd95895d65c4ac9584e7e469e47957bc2411f5896fb06a37c176494a6c70b116c8f8a9dc3cdc9dbaebdd9d63395d8b38f34918429cc5b0625005adef769fdbfd0bff7ae9fd8322f81f6ba4354181edfa337454e74bed7ce5f1cb864698b8202078557b957cb855ab677fd43f70424fa267f3a73e5a20761039ba895f19bec42edd15d41924680927610dbeca9fdaa19434f45ec5d761cea8ece309fa226fd6848907982aa9854d291d5ff2245143015ee7630de4807c602965ed18080e0c7e1de6f0bda1def0c181bb5b9370c4327b0a12009f02eff7f6c3c11b8c33816f58c1b4f710b698d8bf4daf289b0510247bd34ec31e3067d8fbdff09105e08b6e167a06c18845fda7f85a0787027a4eb5f17ecd33e28b391aa85feb7211ebe2a1a77166e5cc8a07f13969b8fa35883af4e6e95b174c6e00f00d7f221cdac8e59fa9856ecbe63d5cb22c0898bd61ce9617ecc31bc0a0c54fb850f2af3a855cf2002e1f5ff9d236abaede8bfaf254d97bac5776d7086438ed15da87fef06db2221e14e16d6aacac206bf01b5935f3d1f3b361f37868985379ccb874ba7d9ee1b87ba5175dc418df9fdfbd0a1acf8950946a35a0738aa67014cf1eca37ff822608728abf794db1998051d81d80a8eac4487a5c6f6d78003d1293b20876177931e122173155c7a2d97297ce7dd97c34e0d0526d771b71f49333a9e55b4a2c40ac47e4576e84529e869a9294291213f40ca8be5937a6019811e77318c429a5937c1fef967f1de4d91636b0d7b86acbfd40d0bba04cf28d6bddc67365919e9b0f37eb19889c4c890a01e49611046f4609467f0b44d13aaa2ac82a640d67a11c73659788beca68951e0699ec5de5da93a479d659cc4231458341e705d6aff2443cb14a3cb3106f70e491157ac0c6658c63a71fad47082a75ad3971e0de502107156a71dfb07df2f34285e69cb4d7e05eb2d0739665e88ba2ab64bd1cc5aec5a1162218c49abe05ff1023286a7a863a1c2f02785824f2b3107c0bb9f67201c80a07f4731ca92975319134952bcb130624e2191c92b65c35b49d8a3b3130ab50e3766750b6e6e67eb3ac9e2870c302ab3c5091ef49434ed182472ef30acbfa163a1c020926cc302853b36702b8f4d41fbd1657ae9ae9b87face7c90e3d74a8c3e6ff8ea0397d55440343f4a685c104ca39902f5c66fcc76f6ab961dad0660195752684a495855b92b2e0286022be14feb386b22b98f77c0e5b104711424c3957fc8f971b7dcb2337fdcf8b43207f9f9a37dc77b621160e27bbeee58122f9f2d340555936b932a5d410b309eb9de9671d82d5ab725e92cc4e93b8824e478f541275abb4e091b5b5e26dd947139b98b0912a7a91ce704b61c67a27fd3902f2697697de51208d39826d5fccac77ba01cb47cbebfbb7e50011820d951af14d90758095069a84c1ba04105e943d59f83b5b7aea441ac186676a612523b16d473b0b023d6269047a08bc8c931bc780cb185ca2f0fe647c658629b83880d60ab4b17aeb98ff0789c5cc4f8012765a50ccbb5e2508c7dfd10da088d748a6779e9bd10b211ad5d803a3d5712a0de154047f0988259981df42fdcd2b6d3ac4c79b88e6d7ca822fa691b2081560d7615707f8faa6f5554d5042cbcacdb093db860ea8c20e3aa97fc7913ecd628731bdc38b92276938ec86d4547b9a6d500ed8dd6df9059a8380e87d3431190b515c9a527e9c2d69f7c6ef820eacd3e6fb65afc05cfa3b9b04dddbb4ce7190bae2ab1b4d77f9c957f5ea4eee0e779554080a893e8d560a32d25d365dcb6852f314d4937ba7b61580c443757a30eaaa35b6bbb3414a1f97010c811c6cef5c347d5971485c1bd7cd6517314fdab1396ccbdd08aec5cdf2dce056aaf56171258f0b6b597d15f1c5c7b79fdda20baa3011f2041d9cb18b91781c41ab601896c7f42f3c73d6dee8619e7c4781acc52156e2b6f3612ce45ed0791fb231ab9af60f3de57f1091d770905d0694d0e9ce318b6a77b248906f947ca1ce8df4d3fd89b0210ed0f498720bcfad9c37cac8cc2e8e062ccd30a398a3e1a3ccee6f712b69d9d73d20402748f02c1e044e1a4314062bbd175671a3bb94bad58556775e0affd9d01be4caf0e2f0cc89d5c2d15591d5d48fb866c190ac6061fcac985b337597412d7964bb1474dc66bd27b5a808a8ac6e349186cd66d1b3370a37f67ff8561be6a08ca39002c6dce2d0382b7712dadd2abdfae7717e715f1e41340ce5826067eacbca2b99a5168fdfce14ac3296ad568147110900646e63923b584ca67836cd54443240985af6a9c6fce2f685b621aefe22554460254416236c90a9b9eab13f3a037f4a1f28bdbf672d2c10b0a627f08c38f62e0ff6ac8c320b48af83e863840dcaea8a38a2e13c4fdad6c755c4b50b2a38f847876c371ddcdadea70da2dc70040f202abe84a817ad69d956604ec42927053467f517c2d1e6f3d8866db0e4c60e411dfeb7c8aba49f51caeaa3c790c6ba9780bfb050ff9bb2dab47f3298f6c0a34706fa14951c4e87db25992f2f97f131ae7d884d98727de1f140a89e153ce9c56985fe112fd57de09101fed5f1f702ffdd9bf243505fc1187dd516072be15c6dd590a5f2cee67b2866472e5bc390d80d4ec3d4b4d8326c9a02a071d2906215b9745bf5ac7c0c1489130fabc220a9117789fafe03d9a51640c7f97412f2958de37b7bc68cbc411bd39883d1e9949bfa9bf5d077e8e4f6b08c4783c71622274d7f87a44f9b25e86253e9ab26519f82a3a5ffdf0826ea2e82b45c2c72277e5b7cff49756c2e565498bc59225053c2d42362baf28157a2d38880cd2c0b01fb34c3671c8454f9cc98633efd98b9703bf270307603668f276d28565defbfce915140e7c9787548325ccf394f028f380ec784d6c014479dbd390df254b9951a5a9961d86edecdaf96889e8be64f5afbb22b6896ecb007a1ccb4804375f7794cd0f1c0d30bc256e336412c4afe30b67ba901c5ec264c6236af3f5867d50e9251d16ad1f576b37ee929b49929b1b8587a8b3cc04a4afb195c8e3f432eb1098f94283c9fb2042d9af0dab687f678f36096edcfc04bee62fd350e0b5f6d17a5695459fc86b666117a2d0f64c68ea0f3b66dc378a8849090a4a409998aadbc36519e886cd6e7d84067632d93f57fa752a228591d59af449dd581627c88055d02dc4b05020e26d20511ba05524aa5aceddcb129ebb10c5d4a844ba658ca6e879d2c91e3cff03b2b003c097063ad032d154584739c8b89d010ffe17f5039aa07e61032048ecb83f6fac2dc45c4e677cbab19d3de73c0770cc6c3d572687f92547cbd1be08829a9b4db77d04d7153e21e509b30dda7bc6853cb82b7d2c203f70f6d734f6269b50cf31060f752edc7239d6e2dc1e9d29c8072ff01075ba7a69a6a6a567db7750239d0491c4921fc2fd420afef819b2b2c7d5df670fb509bdef5db9f0a9c784a3d95ec8465bc2b8923b5a435f13cf531f9d57a3ad6425f7bfec92f22d646dfd9221cd0863d20b01e129dbd57f8723799d460e2c654410833d4bd691b6594cde6f0c51b1b2a81c28e4010892efc70d6ff9e040759fdf6a0b5ee922973f3fed8675b48b0ace5ba3408bca419adeebc248765f01a332726380318092f9f4cb3dff08bd4ff4c3f5636180c92cc6849e30637e18686884265bfce55b393d6ad0518a1eadcfb51c0906dd5976d2b1dfcf90e50c89fad1b6aaf3d75c7a1d1de1f3c922e8f85e0d903b504a20b43099ea58206e74085113abe1e3050d01bdd3278785b5bab0b6f30ae979ffa239ce9c5560899200beef9d7eae8fdb23f95db99fcc0736bfe383fb4d9b74c7ce6cd36820aa3ae3e2653d24ecb04eb73f0f8c44687c297d7377088f9240006f8a5b081879d518390137d17f9d2bb6ff34cd3a73cfc10bed75bd89e7dc72f07902a5db0c9a253648e22df280850288d21eb67b5e283466d6da604257176fd5b77348f95efe1b77770ebfbd95540ef53beb668da6b3c67290b7f4e3071a654ba2d72bf5bd1c7a5c1299fd062c4cda1c2be1d5995a8a34ee5145ec38b983257c7fa73f2917087d6e0d9ae48278fad66f928441f0a47bfd0b8fe9be39fe914eb02da78f4c7175292c91db86f96e0ba83154e4c133919c0ba00d26b377fe406f3d316c89bb6f70646fc2bc2a7c2231610f01f8c880996d13680b2d9c0ca61a8385a41945df666dada683fc451f3b26cbc894063f63ab9c17d1d533b297443361de2a2979e66e21871953457aa6f89f08fa7bd93001ad7f554d685d9f3b62432f4b78fd77d8396be874beb44b9cf1f7917cad695f5ecbb661aad92240f638dc47bb1b0d79fadb72f78786733203efbc3d6695a3063a26c36b190998dcc720676010d665c63c0d2ed7400fd7c621494b2be888edadbdac176858cc1eebaeb8d46902012ce968882198a4e8328562d898ee31da69c9d76857f503e4c125ee50d49d17fa5dc5dbce903d4682efea626c71f4cfe2ad3988403db229354f2a7abc636e09b11e1187b72fcd6e1f258e1bfc259b6b228ca5c62640c2", 0x1000}, {&(0x7f00000010c0)="8be0992c373f6878cb796068fdf87495276dc3500d5ae21f3762c15937d08f7b5b52b0777715e84936d84e03bd8545dd85c543251766eb2be74c0df6a73cd303fc6eb1e119079db4a7cd570e08e74d274c3cba11d30b6f725a307705731e34a23846ea8c6b584a1a3dc77f75f0458d", 0x6f}, {&(0x7f0000001140)="e2e82bfefb2b9abd63579b74fbfd7cc1952fbdacf0f0ab1eb4fcdca51a416a5b644c1d6044a4a03a0bcf3ac5b5cd60aefdbc3ba4eb2dc8ba57d14db03bfa116c33bb5d3b21b7a84890bd886f7f4874dd79476ea5a5236228d584ce6d12a37ebb435ec9d8", 0x64}, {&(0x7f00000011c0)="6c8f9502cefd76d3f17dd1bc97a60da3f6a4bb99c5c3325557c7977f9aea87b76b12ec1e1eb40c5e479f21a11b1262b6bdcfa3aecf8972f204da6f9bc9c3aa6870f55d738de133cf26ff12013b01716ba8d8ea86c9ab1574c95d58a8ccfaaa7dc87459a3caabf8548306b26348d275e757bd726569f8fe801f9f13f11b006635403a6a771414e934f2573d977824b451c19e25acf61b79c1736db555ff5f897ee8649646c5793fd7a39843c75628741208deea71efba76a475619d2a388521f2599e0a494402ba7ccc9e9497965dbb7dd9a6f443f879016a52a58e38e90e4b8c9470b97c27d27bf04a48", 0xea}], 0x5) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000001340), 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001380)={@initdev, @dev}, &(0x7f00000013c0)=0xc) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) (async) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000001400)={'\x00', 0x5, 0x3, 0x80000000}) 07:31:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x33, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)="89123558655f999200a603000d59e8752f0696c6b2611ca29f25d8ecd29ba04bb9f9a59ac68681a96b548ac3124a1b0e885019b55675201980adc819a9805b7da318579d5dcebabb36405bfbb6bd128f", 0x50}, {&(0x7f00000000c0)="d575c2997940e2d11474d6f366c2b947c275a093ec1113dc0bdfd8340b3bb51c6dd9afb18b55fa43629c253780a164abb0a1e4c16989da0bb86fe4e1ad88367e3306cba587f798e34733ed67db9c323ec70dc4a526b3ebaa04b76a5897c8976bd06f17e4e3ce7e5efaf91ce3ebb2c57c758a85dd65bc13a3b74a53fedc9cc5a06e821adca9da61be0f2742f5a945d023bb9a70dd359eacdaa50f6abf2dcfe55192a42478b1fc900c9bc58ddbd67d597c7f733c8d10bb3f8a0c7a93cb6a6e6bad07cd1c10fbf182e5523013ed6b99c182c578aadf4ed503177576ba466a7fcc2ef2550ec3313fdfb4f3ae9a461b2506dd60eacdb5e6a935edbab158624d7fd25e5605d68b7b84c0580be7a98b47a46dab7183d4ecac09afd97f09fc2f1eea5e4c0572459d32d8c0329a2033c2e1f4611b9ab39ea4b7f889b30a76d3fe3c0ce40707064f33d47375358d0215e7af3c25fcef01128b06f001e790eab58276ca2eda6801463e26185e8a28b8c93edd07b75edf2c54d4e1e6b8130458ce80b94ea4eedfd320c1c0273c29d24748804e89852afd6ca6e624c3136503e031035275f01066bf44f091b39a38af94e7dac02c007f0b3f5a73941ce7ab4805cd0b503f5feaaafd5f4ab05a5daebdf81a6f867200c3a7fd3e2b7c8d5694182efdb5ac44b5c041b7152f63063f8b6519f9022b772d24ac076230b2228f4bb0dbb026523754adf9a15bc8ef260545199d2fa9ec60b52bc4b59f688b2187c16564d01ebb4e3b345ed39f778cd2e29bac1aa947e9178ff8128cf4ee0987628444e53b424b320e177210d3b72565c0a35d8ad151a255648265d5c10a6914ce71eb4a15a55caddcfa72b19a8bcce9c2155b66dd1b452f11f14f0894325039f46a6900ecd479922325388fdddf29dc291bb02a8f4e211df9548fc4958a4a9b32f498b728f5098507b931c9122edebca65b98f1470d9f85b4b71e2a656aa47c5d9ff019ed7ea25897d1ee23233e42137be1a564e8b9bd15bbd57430dac406c4fe15f911f7f70c4b136e46c2d9e705de4b65bb5a24a6fa7d67715bb1954acd0fe1e59bcfd827d111c9c0c8d180132d432e2a113db686a3abb3d421362f6c832fb112c0ad699918570dbcf9e1c69a590d07daf279523bb77cd000ad08b2ee4c8fea5711676114c7b646824d214f252ee83b5632df2b5768510f6e023fc6ba615b527b54b5ed1fd075b4ba883c603d8f2a6dd95895d65c4ac9584e7e469e47957bc2411f5896fb06a37c176494a6c70b116c8f8a9dc3cdc9dbaebdd9d63395d8b38f34918429cc5b0625005adef769fdbfd0bff7ae9fd8322f81f6ba4354181edfa337454e74bed7ce5f1cb864698b8202078557b957cb855ab677fd43f70424fa267f3a73e5a20761039ba895f19bec42edd15d41924680927610dbeca9fdaa19434f45ec5d761cea8ece309fa226fd6848907982aa9854d291d5ff2245143015ee7630de4807c602965ed18080e0c7e1de6f0bda1def0c181bb5b9370c4327b0a12009f02eff7f6c3c11b8c33816f58c1b4f710b698d8bf4daf289b0510247bd34ec31e3067d8fbdff09105e08b6e167a06c18845fda7f85a0787027a4eb5f17ecd33e28b391aa85feb7211ebe2a1a77166e5cc8a07f13969b8fa35883af4e6e95b174c6e00f00d7f221cdac8e59fa9856ecbe63d5cb22c0898bd61ce9617ecc31bc0a0c54fb850f2af3a855cf2002e1f5ff9d236abaede8bfaf254d97bac5776d7086438ed15da87fef06db2221e14e16d6aacac206bf01b5935f3d1f3b361f37868985379ccb874ba7d9ee1b87ba5175dc418df9fdfbd0a1acf8950946a35a0738aa67014cf1eca37ff822608728abf794db1998051d81d80a8eac4487a5c6f6d78003d1293b20876177931e122173155c7a2d97297ce7dd97c34e0d0526d771b71f49333a9e55b4a2c40ac47e4576e84529e869a9294291213f40ca8be5937a6019811e77318c429a5937c1fef967f1de4d91636b0d7b86acbfd40d0bba04cf28d6bddc67365919e9b0f37eb19889c4c890a01e49611046f4609467f0b44d13aaa2ac82a640d67a11c73659788beca68951e0699ec5de5da93a479d659cc4231458341e705d6aff2443cb14a3cb3106f70e491157ac0c6658c63a71fad47082a75ad3971e0de502107156a71dfb07df2f34285e69cb4d7e05eb2d0739665e88ba2ab64bd1cc5aec5a1162218c49abe05ff1023286a7a863a1c2f02785824f2b3107c0bb9f67201c80a07f4731ca92975319134952bcb130624e2191c92b65c35b49d8a3b3130ab50e3766750b6e6e67eb3ac9e2870c302ab3c5091ef49434ed182472ef30acbfa163a1c020926cc302853b36702b8f4d41fbd1657ae9ae9b87face7c90e3d74a8c3e6ff8ea0397d55440343f4a685c104ca39902f5c66fcc76f6ab961dad0660195752684a495855b92b2e0286022be14feb386b22b98f77c0e5b104711424c3957fc8f971b7dcb2337fdcf8b43207f9f9a37dc77b621160e27bbeee58122f9f2d340555936b932a5d410b309eb9de9671d82d5ab725e92cc4e93b8824e478f541275abb4e091b5b5e26dd947139b98b0912a7a91ce704b61c67a27fd3902f2697697de51208d39826d5fccac77ba01cb47cbebfbb7e50011820d951af14d90758095069a84c1ba04105e943d59f83b5b7aea441ac186676a612523b16d473b0b023d6269047a08bc8c931bc780cb185ca2f0fe647c658629b83880d60ab4b17aeb98ff0789c5cc4f8012765a50ccbb5e2508c7dfd10da088d748a6779e9bd10b211ad5d803a3d5712a0de154047f0988259981df42fdcd2b6d3ac4c79b88e6d7ca822fa691b2081560d7615707f8faa6f5554d5042cbcacdb093db860ea8c20e3aa97fc7913ecd628731bdc38b92276938ec86d4547b9a6d500ed8dd6df9059a8380e87d3431190b515c9a527e9c2d69f7c6ef820eacd3e6fb65afc05cfa3b9b04dddbb4ce7190bae2ab1b4d77f9c957f5ea4eee0e779554080a893e8d560a32d25d365dcb6852f314d4937ba7b61580c443757a30eaaa35b6bbb3414a1f97010c811c6cef5c347d5971485c1bd7cd6517314fdab1396ccbdd08aec5cdf2dce056aaf56171258f0b6b597d15f1c5c7b79fdda20baa3011f2041d9cb18b91781c41ab601896c7f42f3c73d6dee8619e7c4781acc52156e2b6f3612ce45ed0791fb231ab9af60f3de57f1091d770905d0694d0e9ce318b6a77b248906f947ca1ce8df4d3fd89b0210ed0f498720bcfad9c37cac8cc2e8e062ccd30a398a3e1a3ccee6f712b69d9d73d20402748f02c1e044e1a4314062bbd175671a3bb94bad58556775e0affd9d01be4caf0e2f0cc89d5c2d15591d5d48fb866c190ac6061fcac985b337597412d7964bb1474dc66bd27b5a808a8ac6e349186cd66d1b3370a37f67ff8561be6a08ca39002c6dce2d0382b7712dadd2abdfae7717e715f1e41340ce5826067eacbca2b99a5168fdfce14ac3296ad568147110900646e63923b584ca67836cd54443240985af6a9c6fce2f685b621aefe22554460254416236c90a9b9eab13f3a037f4a1f28bdbf672d2c10b0a627f08c38f62e0ff6ac8c320b48af83e863840dcaea8a38a2e13c4fdad6c755c4b50b2a38f847876c371ddcdadea70da2dc70040f202abe84a817ad69d956604ec42927053467f517c2d1e6f3d8866db0e4c60e411dfeb7c8aba49f51caeaa3c790c6ba9780bfb050ff9bb2dab47f3298f6c0a34706fa14951c4e87db25992f2f97f131ae7d884d98727de1f140a89e153ce9c56985fe112fd57de09101fed5f1f702ffdd9bf243505fc1187dd516072be15c6dd590a5f2cee67b2866472e5bc390d80d4ec3d4b4d8326c9a02a071d2906215b9745bf5ac7c0c1489130fabc220a9117789fafe03d9a51640c7f97412f2958de37b7bc68cbc411bd39883d1e9949bfa9bf5d077e8e4f6b08c4783c71622274d7f87a44f9b25e86253e9ab26519f82a3a5ffdf0826ea2e82b45c2c72277e5b7cff49756c2e565498bc59225053c2d42362baf28157a2d38880cd2c0b01fb34c3671c8454f9cc98633efd98b9703bf270307603668f276d28565defbfce915140e7c9787548325ccf394f028f380ec784d6c014479dbd390df254b9951a5a9961d86edecdaf96889e8be64f5afbb22b6896ecb007a1ccb4804375f7794cd0f1c0d30bc256e336412c4afe30b67ba901c5ec264c6236af3f5867d50e9251d16ad1f576b37ee929b49929b1b8587a8b3cc04a4afb195c8e3f432eb1098f94283c9fb2042d9af0dab687f678f36096edcfc04bee62fd350e0b5f6d17a5695459fc86b666117a2d0f64c68ea0f3b66dc378a8849090a4a409998aadbc36519e886cd6e7d84067632d93f57fa752a228591d59af449dd581627c88055d02dc4b05020e26d20511ba05524aa5aceddcb129ebb10c5d4a844ba658ca6e879d2c91e3cff03b2b003c097063ad032d154584739c8b89d010ffe17f5039aa07e61032048ecb83f6fac2dc45c4e677cbab19d3de73c0770cc6c3d572687f92547cbd1be08829a9b4db77d04d7153e21e509b30dda7bc6853cb82b7d2c203f70f6d734f6269b50cf31060f752edc7239d6e2dc1e9d29c8072ff01075ba7a69a6a6a567db7750239d0491c4921fc2fd420afef819b2b2c7d5df670fb509bdef5db9f0a9c784a3d95ec8465bc2b8923b5a435f13cf531f9d57a3ad6425f7bfec92f22d646dfd9221cd0863d20b01e129dbd57f8723799d460e2c654410833d4bd691b6594cde6f0c51b1b2a81c28e4010892efc70d6ff9e040759fdf6a0b5ee922973f3fed8675b48b0ace5ba3408bca419adeebc248765f01a332726380318092f9f4cb3dff08bd4ff4c3f5636180c92cc6849e30637e18686884265bfce55b393d6ad0518a1eadcfb51c0906dd5976d2b1dfcf90e50c89fad1b6aaf3d75c7a1d1de1f3c922e8f85e0d903b504a20b43099ea58206e74085113abe1e3050d01bdd3278785b5bab0b6f30ae979ffa239ce9c5560899200beef9d7eae8fdb23f95db99fcc0736bfe383fb4d9b74c7ce6cd36820aa3ae3e2653d24ecb04eb73f0f8c44687c297d7377088f9240006f8a5b081879d518390137d17f9d2bb6ff34cd3a73cfc10bed75bd89e7dc72f07902a5db0c9a253648e22df280850288d21eb67b5e283466d6da604257176fd5b77348f95efe1b77770ebfbd95540ef53beb668da6b3c67290b7f4e3071a654ba2d72bf5bd1c7a5c1299fd062c4cda1c2be1d5995a8a34ee5145ec38b983257c7fa73f2917087d6e0d9ae48278fad66f928441f0a47bfd0b8fe9be39fe914eb02da78f4c7175292c91db86f96e0ba83154e4c133919c0ba00d26b377fe406f3d316c89bb6f70646fc2bc2a7c2231610f01f8c880996d13680b2d9c0ca61a8385a41945df666dada683fc451f3b26cbc894063f63ab9c17d1d533b297443361de2a2979e66e21871953457aa6f89f08fa7bd93001ad7f554d685d9f3b62432f4b78fd77d8396be874beb44b9cf1f7917cad695f5ecbb661aad92240f638dc47bb1b0d79fadb72f78786733203efbc3d6695a3063a26c36b190998dcc720676010d665c63c0d2ed7400fd7c621494b2be888edadbdac176858cc1eebaeb8d46902012ce968882198a4e8328562d898ee31da69c9d76857f503e4c125ee50d49d17fa5dc5dbce903d4682efea626c71f4cfe2ad3988403db229354f2a7abc636e09b11e1187b72fcd6e1f258e1bfc259b6b228ca5c62640c2", 0x1000}, {&(0x7f00000010c0)="8be0992c373f6878cb796068fdf87495276dc3500d5ae21f3762c15937d08f7b5b52b0777715e84936d84e03bd8545dd85c543251766eb2be74c0df6a73cd303fc6eb1e119079db4a7cd570e08e74d274c3cba11d30b6f725a307705731e34a23846ea8c6b584a1a3dc77f75f0458d", 0x6f}, {&(0x7f0000001140)="e2e82bfefb2b9abd63579b74fbfd7cc1952fbdacf0f0ab1eb4fcdca51a416a5b644c1d6044a4a03a0bcf3ac5b5cd60aefdbc3ba4eb2dc8ba57d14db03bfa116c33bb5d3b21b7a84890bd886f7f4874dd79476ea5a5236228d584ce6d12a37ebb435ec9d8", 0x64}, {&(0x7f00000011c0)="6c8f9502cefd76d3f17dd1bc97a60da3f6a4bb99c5c3325557c7977f9aea87b76b12ec1e1eb40c5e479f21a11b1262b6bdcfa3aecf8972f204da6f9bc9c3aa6870f55d738de133cf26ff12013b01716ba8d8ea86c9ab1574c95d58a8ccfaaa7dc87459a3caabf8548306b26348d275e757bd726569f8fe801f9f13f11b006635403a6a771414e934f2573d977824b451c19e25acf61b79c1736db555ff5f897ee8649646c5793fd7a39843c75628741208deea71efba76a475619d2a388521f2599e0a494402ba7ccc9e9497965dbb7dd9a6f443f879016a52a58e38e90e4b8c9470b97c27d27bf04a48", 0xea}], 0x5) (async) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000001340), 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001380)={@initdev, @dev}, &(0x7f00000013c0)=0xc) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) (async) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000001400)={'\x00', 0x5, 0x3, 0x80000000}) 07:31:32 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x35, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000200)="2b7a8e6f3498ea635a4c89fee96392f6f318e0793ae0dca7fb81248c169b4564f306f68c9259886f35b27d4b3a8178c0f70154e76c8eb823e36f083dde3de4ae333db952d43aa0418f76e2de335e", &(0x7f0000000100)=@tcp}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 07:31:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x36, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000200)="2b7a8e6f3498ea635a4c89fee96392f6f318e0793ae0dca7fb81248c169b4564f306f68c9259886f35b27d4b3a8178c0f70154e76c8eb823e36f083dde3de4ae333db952d43aa0418f76e2de335e", &(0x7f0000000100)=@tcp}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000200)="2b7a8e6f3498ea635a4c89fee96392f6f318e0793ae0dca7fb81248c169b4564f306f68c9259886f35b27d4b3a8178c0f70154e76c8eb823e36f083dde3de4ae333db952d43aa0418f76e2de335e", &(0x7f0000000100)=@tcp}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 07:31:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:32 executing program 2: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:33 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x37, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:33 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000200)="2b7a8e6f3498ea635a4c89fee96392f6f318e0793ae0dca7fb81248c169b4564f306f68c9259886f35b27d4b3a8178c0f70154e76c8eb823e36f083dde3de4ae333db952d43aa0418f76e2de335e", &(0x7f0000000100)=@tcp}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 07:31:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:33 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x63, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000400), 0x7fffffffffffffff, 0x100) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x1, 0x5, 0x6, 0x1}, {0x3ff, 0x1, 0x65, 0x2}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x1, 0x0, 0x1}, 0xf, 0x7, 0x0, 0x0, "b2f61c01f702166bb0d311fae26ae0bd736bdafc2bbbd2a9c53aa4c9287215cc8870c80a7b81fc85468f9a6116aaca6dfdd35a996f379ee27a4cfdb023c62d1a"}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x20044810) syz_clone(0xd029000, 0x0, 0x8d00, 0x0, 0x0, 0x0) syz_clone(0x10100000, &(0x7f0000000000)="f022d784d837b072a536e1ec0c6d80bd71cf4aa9", 0x14, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="48d64acd130bc82b68d57b55ab4d1d9f9b22a61f38c99e1428ed6c79b480461fd4d81ef7313f2199260d2be2c83169d8e627c58bd78acb2ceb8fc3549106a7fabb6b09015740ce4fb6ed4c42722c3a19d10d0a8c16219902e6520a931673663ee0596815fdb6acac6217bc345fe3144a9cc99f86d525d177e3fa6da3cbe97191ce040a329c59cb5e286c39546dedcfd06e28ed8f36655c90e9f613eedd264945fb7e4d12dc45d448702c781ccdaa5d881d216d0a8ea45f263094") 07:31:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x67, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x140, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') (async) r1 = syz_open_dev$vcsa(&(0x7f0000000400), 0x7fffffffffffffff, 0x100) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x1, 0x5, 0x6, 0x1}, {0x3ff, 0x1, 0x65, 0x2}]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r2}, 0x10) (async) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x1, 0x0, 0x1}, 0xf, 0x7, 0x0, 0x0, "b2f61c01f702166bb0d311fae26ae0bd736bdafc2bbbd2a9c53aa4c9287215cc8870c80a7b81fc85468f9a6116aaca6dfdd35a996f379ee27a4cfdb023c62d1a"}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x20044810) syz_clone(0xd029000, 0x0, 0x8d00, 0x0, 0x0, 0x0) (async) syz_clone(0x10100000, &(0x7f0000000000)="f022d784d837b072a536e1ec0c6d80bd71cf4aa9", 0x14, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="48d64acd130bc82b68d57b55ab4d1d9f9b22a61f38c99e1428ed6c79b480461fd4d81ef7313f2199260d2be2c83169d8e627c58bd78acb2ceb8fc3549106a7fabb6b09015740ce4fb6ed4c42722c3a19d10d0a8c16219902e6520a931673663ee0596815fdb6acac6217bc345fe3144a9cc99f86d525d177e3fa6da3cbe97191ce040a329c59cb5e286c39546dedcfd06e28ed8f36655c90e9f613eedd264945fb7e4d12dc45d448702c781ccdaa5d881d216d0a8ea45f263094") 07:31:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) [ 113.963958][ T27] audit: type=1400 audit(1695627093.045:304): avc: denied { create } for pid=6095 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 07:31:33 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:33 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0xec0, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000400), 0x7fffffffffffffff, 0x100) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x1, 0x5, 0x6, 0x1}, {0x3ff, 0x1, 0x65, 0x2}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x1, 0x0, 0x1}, 0xf, 0x7, 0x0, 0x0, "b2f61c01f702166bb0d311fae26ae0bd736bdafc2bbbd2a9c53aa4c9287215cc8870c80a7b81fc85468f9a6116aaca6dfdd35a996f379ee27a4cfdb023c62d1a"}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x20044810) syz_clone(0xd029000, 0x0, 0x8d00, 0x0, 0x0, 0x0) syz_clone(0x10100000, &(0x7f0000000000)="f022d784d837b072a536e1ec0c6d80bd71cf4aa9", 0x14, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="48d64acd130bc82b68d57b55ab4d1d9f9b22a61f38c99e1428ed6c79b480461fd4d81ef7313f2199260d2be2c83169d8e627c58bd78acb2ceb8fc3549106a7fabb6b09015740ce4fb6ed4c42722c3a19d10d0a8c16219902e6520a931673663ee0596815fdb6acac6217bc345fe3144a9cc99f86d525d177e3fa6da3cbe97191ce040a329c59cb5e286c39546dedcfd06e28ed8f36655c90e9f613eedd264945fb7e4d12dc45d448702c781ccdaa5d881d216d0a8ea45f263094") 07:31:34 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x33fe0, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000000)=ANY=[@ANYBLOB="fad45c11770aa3593da56ee4b80a8126942aea15ab1014df451ecee38afdd4e453d419815ad87df9ec1d6400000000000000237b30cb3d8f6316c6f0a09cc180cb1f033fabe075ac"]) 07:31:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0xfffffdef, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x304, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000000)=ANY=[@ANYBLOB="fad45c11770aa3593da56ee4b80a8126942aea15ab1014df451ecee38afdd4e453d419815ad87df9ec1d6400000000000000237b30cb3d8f6316c6f0a09cc180cb1f033fabe075ac"]) 07:31:34 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:34 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 114.976770][ T27] audit: type=1400 audit(1695627094.055:305): avc: denied { read write } for pid=6130 comm="syz-executor.3" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.001622][ T27] audit: type=1400 audit(1695627094.055:306): avc: denied { open } for pid=6130 comm="syz-executor.3" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 07:31:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) (async, rerun: 64) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000000)=ANY=[@ANYBLOB="fad45c11770aa3593da56ee4b80a8126942aea15ab1014df451ecee38afdd4e453d419815ad87df9ec1d6400000000000000237b30cb3d8f6316c6f0a09cc180cb1f033fabe075ac"]) (rerun: 64) 07:31:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 115.063407][ T27] audit: type=1400 audit(1695627094.065:307): avc: denied { ioctl } for pid=6130 comm="syz-executor.3" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 07:31:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x32, 0xff, 0x2, 0x1, 0x5, 0x2, 0xc33c659a458a323c, 0x3, 0x200, 0x40, 0x2bd, 0x9, 0x8, 0x38, 0x2, 0x2, 0x2, 0x8}, [{0x6474e551, 0x9, 0x3, 0x7cf, 0x8001, 0x1, 0x9, 0x800}, {0x5, 0xefd2, 0xffff, 0x81, 0x0, 0x4c2, 0x8001, 0x6}], "b6cbdf2a4f5e75fd4567f6ad2eebac9128f12940272b9b68a751df3105e3df1c43c3e6e5b2d4da987ab410f7d2b676c3f7be3709bf58b4fadb5686eb454fb36249faa7962b49536113fb65c4b004b2a7cf443030450fa5b0f3ddee6af245f6b4931f436f45a2f8ad85dde94f2a4e76d7852c71122a345426842a010d33d2406218e3f0bb7980c6f112e0c9056ee44fbbbd93169aafb4c2bf83d972ff3dc329b4fafa9d4f3f2ca0246e1f357ffc30750053b1dfe14fbea910b04ab5721b27771388f51d956010", ['\x00', '\x00', '\x00']}, 0x476) 07:31:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x310, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:34 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:34 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:34 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 115.919909][ T27] audit: type=1400 audit(1695627095.005:308): avc: denied { read } for pid=6161 comm="syz-executor.3" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 07:31:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x367, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 115.947111][ T27] audit: type=1400 audit(1695627095.025:309): avc: denied { open } for pid=6161 comm="syz-executor.3" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 07:31:35 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x32, 0xff, 0x2, 0x1, 0x5, 0x2, 0xc33c659a458a323c, 0x3, 0x200, 0x40, 0x2bd, 0x9, 0x8, 0x38, 0x2, 0x2, 0x2, 0x8}, [{0x6474e551, 0x9, 0x3, 0x7cf, 0x8001, 0x1, 0x9, 0x800}, {0x5, 0xefd2, 0xffff, 0x81, 0x0, 0x4c2, 0x8001, 0x6}], "b6cbdf2a4f5e75fd4567f6ad2eebac9128f12940272b9b68a751df3105e3df1c43c3e6e5b2d4da987ab410f7d2b676c3f7be3709bf58b4fadb5686eb454fb36249faa7962b49536113fb65c4b004b2a7cf443030450fa5b0f3ddee6af245f6b4931f436f45a2f8ad85dde94f2a4e76d7852c71122a345426842a010d33d2406218e3f0bb7980c6f112e0c9056ee44fbbbd93169aafb4c2bf83d972ff3dc329b4fafa9d4f3f2ca0246e1f357ffc30750053b1dfe14fbea910b04ab5721b27771388f51d956010", ['\x00', '\x00', '\x00']}, 0x476) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) pipe(&(0x7f0000000080)) (async) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x32, 0xff, 0x2, 0x1, 0x5, 0x2, 0xc33c659a458a323c, 0x3, 0x200, 0x40, 0x2bd, 0x9, 0x8, 0x38, 0x2, 0x2, 0x2, 0x8}, [{0x6474e551, 0x9, 0x3, 0x7cf, 0x8001, 0x1, 0x9, 0x800}, {0x5, 0xefd2, 0xffff, 0x81, 0x0, 0x4c2, 0x8001, 0x6}], "b6cbdf2a4f5e75fd4567f6ad2eebac9128f12940272b9b68a751df3105e3df1c43c3e6e5b2d4da987ab410f7d2b676c3f7be3709bf58b4fadb5686eb454fb36249faa7962b49536113fb65c4b004b2a7cf443030450fa5b0f3ddee6af245f6b4931f436f45a2f8ad85dde94f2a4e76d7852c71122a345426842a010d33d2406218e3f0bb7980c6f112e0c9056ee44fbbbd93169aafb4c2bf83d972ff3dc329b4fafa9d4f3f2ca0246e1f357ffc30750053b1dfe14fbea910b04ab5721b27771388f51d956010", ['\x00', '\x00', '\x00']}, 0x476) (async) 07:31:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x2, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x3, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) [ 116.066721][ T6175] Restarting kernel threads ... done. [ 116.072465][ T27] audit: type=1400 audit(1695627095.155:310): avc: denied { ioctl } for pid=6174 comm="syz-executor.3" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 116.103089][ T6180] Restarting kernel threads ... done. 07:31:35 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x32, 0xff, 0x2, 0x1, 0x5, 0x2, 0xc33c659a458a323c, 0x3, 0x200, 0x40, 0x2bd, 0x9, 0x8, 0x38, 0x2, 0x2, 0x2, 0x8}, [{0x6474e551, 0x9, 0x3, 0x7cf, 0x8001, 0x1, 0x9, 0x800}, {0x5, 0xefd2, 0xffff, 0x81, 0x0, 0x4c2, 0x8001, 0x6}], "b6cbdf2a4f5e75fd4567f6ad2eebac9128f12940272b9b68a751df3105e3df1c43c3e6e5b2d4da987ab410f7d2b676c3f7be3709bf58b4fadb5686eb454fb36249faa7962b49536113fb65c4b004b2a7cf443030450fa5b0f3ddee6af245f6b4931f436f45a2f8ad85dde94f2a4e76d7852c71122a345426842a010d33d2406218e3f0bb7980c6f112e0c9056ee44fbbbd93169aafb4c2bf83d972ff3dc329b4fafa9d4f3f2ca0246e1f357ffc30750053b1dfe14fbea910b04ab5721b27771388f51d956010", ['\x00', '\x00', '\x00']}, 0x476) 07:31:35 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x4, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:35 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613eb0af2d32adc03704c66ea5e265d2c96721b5ef634f4054c359e041461ad92f34122951ef3532e1de2747800d0864ee3f38fe97ced0596e3b6c3e1fa084871fd1f7de8b8bc4776741a10b6770dc9397006e9cc424922776cdff00"/202], 0x42) 07:31:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x5, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:36 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x4c4) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0x0, 0x0, 0x1000}}], 0x18}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 07:31:36 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 116.898182][ T6188] Restarting kernel threads ... done. 07:31:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x42) 07:31:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x6, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 116.948810][ T6201] validate_nla: 16 callbacks suppressed [ 116.948825][ T6201] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 116.962809][ T6201] __nla_validate_parse: 17 callbacks suppressed [ 116.962819][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:36 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x4c4) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0x0, 0x0, 0x1000}}], 0x18}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) socket$inet(0x2, 0x4000000805, 0x0) (async) listen(r0, 0x4c4) (async) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0x0, 0x0, 0x1000}}], 0x18}, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) (async) [ 117.071149][ T6213] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 117.079765][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:36 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x4c4) (async) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0x0, 0x0, 0x1000}}], 0x18}, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 07:31:36 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:36 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x42) 07:31:36 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x7, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:36 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) preadv2(r1, &(0x7f00000005c0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}], 0x1, 0x100000, 0x0, 0x1d) 07:31:36 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) (async) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) preadv2(r1, &(0x7f00000005c0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}], 0x1, 0x100000, 0x0, 0x1d) 07:31:36 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x42) 07:31:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x8, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:37 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) preadv2(r1, &(0x7f00000005c0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}], 0x1, 0x100000, 0x0, 0x1d) [ 117.874760][ T6231] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 117.883163][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:37 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000100c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="001f000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 117.978502][ T6242] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 117.987205][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.042717][ T6251] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 118.084778][ T6251] bond2: entered promiscuous mode [ 118.102388][ T6251] batadv1: entered promiscuous mode [ 118.108276][ T6251] batadv1: entered allmulticast mode [ 118.119662][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 118.129094][ T6251] bond2: (slave batadv1): making interface the new active one [ 118.140559][ T6251] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 118.152987][ T6251] bond2 (unregistering): (slave batadv1): Releasing active interface [ 118.163794][ T6251] bond2 (unregistering): Released all slaves 07:31:37 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x42) 07:31:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x9, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:37 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000100c0002000800010006"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="001f000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 07:31:37 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64000000100c0002000800010006"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="001f000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 07:31:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xa, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 118.902516][ T6262] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 118.911132][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:38 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) [ 118.964452][ T6272] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 119.003042][ T6272] bond2: entered promiscuous mode 07:31:38 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x42) [ 119.012982][ T6275] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 119.021901][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:38 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:38 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xb, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x42) 07:31:38 executing program 0: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:38 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xc, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 119.878678][ T6291] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 119.887353][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xd, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x42) 07:31:39 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 119.939325][ T6299] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 119.947724][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.975035][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:39 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xe, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x42) [ 120.082405][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:39 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xf, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x42) 07:31:39 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:39 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x10, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9edc1b5198187e23dc93ffc3960168d6a16d3abb452a7cc35d8e280b23faa0e99d9c4972a873d719e637b00e68f955465613e"], 0x42) 07:31:39 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x11, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x12, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x42) 07:31:40 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:40 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x14, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x42) 07:31:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x25, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:40 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x34, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x42) 07:31:40 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x48, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x4c, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x60, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:41 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008299628c1481b8218d9cb7efdc65dd47929a7828f00e445903369f9"], 0x42) 07:31:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x68, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x80, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@in6_addr=@mcast2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c06}, 0x0) 07:31:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x6c, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 122.071857][ T6372] validate_nla: 12 callbacks suppressed [ 122.071872][ T6372] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 122.085812][ T6372] __nla_validate_parse: 10 callbacks suppressed [ 122.085822][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.144653][ T27] audit: type=1400 audit(1695627101.225:311): avc: denied { create } for pid=6376 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 122.173255][ T6379] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 122.182482][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:41 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x74, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x80, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@in6_addr=@mcast2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c06}, 0x0) 07:31:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff"], 0x42) 07:31:41 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x80, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@in6_addr=@mcast2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c06}, 0x0) socket$netlink(0x10, 0x3, 0x15) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x80, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@in6_addr=@mcast2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c06}, 0x0) (async) 07:31:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff"], 0x42) [ 122.821981][ T6389] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 122.830499][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x7a, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:42 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:42 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff"], 0x42) 07:31:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x146, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 122.971720][ T6407] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 122.980159][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.085040][ T6415] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 123.093383][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:42 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600082996"], 0x42) 07:31:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x300, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:42 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 123.812165][ T6421] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 123.820657][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x500, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff"], 0x42) 07:31:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x600, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:43 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 123.900652][ T6427] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 123.908985][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:43 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@struct={0x0, 0x0, 0x0, 0x2}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/212, 0x3c, 0xd4, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRESOCT, @ANYBLOB], 0x3c}}, 0x44004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x400, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xd0, r6, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x81, 0xbe, "dccbcbc551f036aceaed18fad7b079c55bfc35a29ef61f102282debcd5f5acd2f595b5c3fec47984c9ee7f72431a0ffa7ff8bd9ade76acb8c48c48892f9103e7fb6c7f8adb022dd8fc62c4e827abe6ac77a6bf8b188366a26d5ac14cc80818bba1557be9ca0e7e094338f8724ea64ffa17a2acf1bc8a2ab6cfc47b8f94"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000041) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) r8 = signalfd4(r0, &(0x7f00000000c0)={[0x8000000000000000]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18000001008425a29d91a20ab7cbbf9dd45cafd00000000000000200000018480000fd1f0000000000000000000085100000fafff7ff18520b000a2600000000"], &(0x7f0000000700)='syzkaller\x00', 0x4502, 0xc, &(0x7f0000000740)=""/12, 0x41000, 0x12, '\x00', r3, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xa, 0x7fffffff, 0x7fff}, 0x10, 0xffffffffffffffff, r8, 0x1, 0x0, &(0x7f0000000800)=[{0x0, 0x3, 0x1, 0x6}], 0x10, 0x1}, 0x90) sendto(r1, &(0x7f0000000440)="dc303aa47801d82c3c5a3ac04058813bb3a5abf62a0db9e8bf66ba0b7df9741623528d6a5ceb2f62cb7b38f5f6a95d40723f8edeecd988d23943f6b15dd91d373634b5a331e705c73df27ae962aa27e0553cb74b1b51908e7c96813b73f3dbf25ea4e238a879ef627f3cc25ad43a50ac6e6274221a41a37612d6e68900e1473731a322445dee2364fb802282f1c66d842ac4773cacb978ed2e38da836991a2f7ee4ea4", 0xa3, 0x20004080, &(0x7f00000005c0)=@caif=@dgm={0x25, 0x3, 0x1f}, 0x80) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000bc0), &(0x7f0000000c00), 0x2, 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000900)=0x100, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', r3, 0x0, r8, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0xff, 0x200}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x5, 0x1, 0x8, 0x9}], 0x10, 0x1}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0x3}, {0x5, 0xfff2}, {0xb, 0xd}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8811}, 0x48080) 07:31:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff"], 0x42) [ 123.989992][ T6434] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 123.998362][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.003065][ T6436] selinux_netlink_send: 68 callbacks suppressed [ 124.003077][ T6436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=6436 comm=syz-executor.3 07:31:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x700, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:43 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@struct={0x0, 0x0, 0x0, 0x2}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/212, 0x3c, 0xd4, 0x1}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRESOCT, @ANYBLOB], 0x3c}}, 0x44004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x400, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xd0, r6, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x81, 0xbe, "dccbcbc551f036aceaed18fad7b079c55bfc35a29ef61f102282debcd5f5acd2f595b5c3fec47984c9ee7f72431a0ffa7ff8bd9ade76acb8c48c48892f9103e7fb6c7f8adb022dd8fc62c4e827abe6ac77a6bf8b188366a26d5ac14cc80818bba1557be9ca0e7e094338f8724ea64ffa17a2acf1bc8a2ab6cfc47b8f94"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000041) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) (async, rerun: 32) r8 = signalfd4(r0, &(0x7f00000000c0)={[0x8000000000000000]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18000001008425a29d91a20ab7cbbf9dd45cafd00000000000000200000018480000fd1f0000000000000000000085100000fafff7ff18520b000a2600000000"], &(0x7f0000000700)='syzkaller\x00', 0x4502, 0xc, &(0x7f0000000740)=""/12, 0x41000, 0x12, '\x00', r3, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xa, 0x7fffffff, 0x7fff}, 0x10, 0xffffffffffffffff, r8, 0x1, 0x0, &(0x7f0000000800)=[{0x0, 0x3, 0x1, 0x6}], 0x10, 0x1}, 0x90) sendto(r1, &(0x7f0000000440)="dc303aa47801d82c3c5a3ac04058813bb3a5abf62a0db9e8bf66ba0b7df9741623528d6a5ceb2f62cb7b38f5f6a95d40723f8edeecd988d23943f6b15dd91d373634b5a331e705c73df27ae962aa27e0553cb74b1b51908e7c96813b73f3dbf25ea4e238a879ef627f3cc25ad43a50ac6e6274221a41a37612d6e68900e1473731a322445dee2364fb802282f1c66d842ac4773cacb978ed2e38da836991a2f7ee4ea4", 0xa3, 0x20004080, &(0x7f00000005c0)=@caif=@dgm={0x25, 0x3, 0x1f}, 0x80) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000bc0), &(0x7f0000000c00), 0x2, 0x1) (async) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000900)=0x100, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', r3, 0x0, r8, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0xff, 0x200}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x5, 0x1, 0x8, 0x9}], 0x10, 0x1}, 0x90) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0x3}, {0x5, 0xfff2}, {0xb, 0xd}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8811}, 0x48080) [ 124.081843][ T6443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=6443 comm=syz-executor.3 [ 124.096546][ T6443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=6443 comm=syz-executor.3 [ 124.115682][ T6446] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 124.123967][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:43 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x900, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:43 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@struct={0x0, 0x0, 0x0, 0x2}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/212, 0x3c, 0xd4, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRESOCT, @ANYBLOB], 0x3c}}, 0x44004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x400, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xd0, r6, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x81, 0xbe, "dccbcbc551f036aceaed18fad7b079c55bfc35a29ef61f102282debcd5f5acd2f595b5c3fec47984c9ee7f72431a0ffa7ff8bd9ade76acb8c48c48892f9103e7fb6c7f8adb022dd8fc62c4e827abe6ac77a6bf8b188366a26d5ac14cc80818bba1557be9ca0e7e094338f8724ea64ffa17a2acf1bc8a2ab6cfc47b8f94"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000041) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) (async, rerun: 64) r8 = signalfd4(r0, &(0x7f00000000c0)={[0x8000000000000000]}, 0x8, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18000001008425a29d91a20ab7cbbf9dd45cafd00000000000000200000018480000fd1f0000000000000000000085100000fafff7ff18520b000a2600000000"], &(0x7f0000000700)='syzkaller\x00', 0x4502, 0xc, &(0x7f0000000740)=""/12, 0x41000, 0x12, '\x00', r3, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xa, 0x7fffffff, 0x7fff}, 0x10, 0xffffffffffffffff, r8, 0x1, 0x0, &(0x7f0000000800)=[{0x0, 0x3, 0x1, 0x6}], 0x10, 0x1}, 0x90) sendto(r1, &(0x7f0000000440)="dc303aa47801d82c3c5a3ac04058813bb3a5abf62a0db9e8bf66ba0b7df9741623528d6a5ceb2f62cb7b38f5f6a95d40723f8edeecd988d23943f6b15dd91d373634b5a331e705c73df27ae962aa27e0553cb74b1b51908e7c96813b73f3dbf25ea4e238a879ef627f3cc25ad43a50ac6e6274221a41a37612d6e68900e1473731a322445dee2364fb802282f1c66d842ac4773cacb978ed2e38da836991a2f7ee4ea4", 0xa3, 0x20004080, &(0x7f00000005c0)=@caif=@dgm={0x25, 0x3, 0x1f}, 0x80) (async, rerun: 64) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000bc0), &(0x7f0000000c00), 0x2, 0x1) (rerun: 64) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000900)=0x100, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', r3, 0x0, r8, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0xff, 0x200}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x5, 0x1, 0x8, 0x9}], 0x10, 0x1}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0x3}, {0x5, 0xfff2}, {0xb, 0xd}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8811}, 0x48080) 07:31:43 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff"], 0x42) 07:31:43 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000000000000080000174a197b7d927f6400fbabef4353bae3156ce9b30ceb812110cb39e4edd36512054241ad8c4172201fea8c34e5e4f730e511982a5501ecc19634bfa7eb289267a34e33f243728d0548d37020c060c9f6068d89a52e9a8d072521e328562299eafcfcb3b487182ba4a0b0eeeca26a026abf9c01", @ANYRES32, @ANYBLOB="000000000000001f760000000000000018010000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000e211bc107676d575af310d20005f4b201fe86b4262b029e2dda3d23a1f14c6d04b239d68ae23213cb77a3f57cd6696ee713e1364e501060c0d136a667f846f03f548681ed57d36fc4b9be5c1a8919f4897f76a5de2c5d9f6f553360714b78c74bd543fa6b0ae4e1606d499cb2a9a74df00a16e8ea12e503b616a4730bd4eea63"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0xfffffe53, 0x10000, {{0x36, 0x4, 0x3, 0x1e, 0xd8, 0x68, 0x0, 0x6, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xb}, {[@noop, @cipso={0x86, 0x31, 0x2, [{0x0, 0x8, "36c9d3023bf6"}, {0x7, 0x6, "aa9b9f82"}, {0x6, 0x11, "9210121a14791551bbe34ec14ad378"}, {0x6, 0x4, 'Np'}, {0x0, 0x8, "966d05a1c8e9"}]}, @rr={0x7, 0x17, 0x66, [@remote, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x27, 0x31, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @local, @empty]}, @lsrr={0x83, 0x7, 0xaa, [@multicast1]}, @lsrr={0x83, 0xb, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_prespec={0x44, 0x3c, 0x85, 0x3, 0x8, [{@rand_addr=0x64010102, 0x5b92}, {@private=0xa010101, 0x9}, {@private=0xa010100, 0xd410}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x1000}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x9}]}, @ra={0x94, 0x4}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x8, 0x100, 0x5}) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x3ff, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x6, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @alu={0x7, 0x1, 0x1, 0x7, 0x2, 0x2, 0x10}, @exit, @ldst={0x2, 0x1, 0x3, 0x1, 0x4, 0x4, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41100, 0x11, '\x00', r1, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xe, 0x910, 0xc7}, 0x10, 0xffffffffffffffff, r2, 0x1, &(0x7f0000000440)=[0x1, r3], &(0x7f0000000500)=[{0x5, 0x3, 0x10, 0x2}], 0x10, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 07:31:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x9fa, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 124.794111][ T6454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=6454 comm=syz-executor.3 [ 124.808579][ T6453] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 124.816891][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:44 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200"], 0x42) 07:31:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x9fb, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000000000000080000174a197b7d927f6400fbabef4353bae3156ce9b30ceb812110cb39e4edd36512054241ad8c4172201fea8c34e5e4f730e511982a5501ecc19634bfa7eb289267a34e33f243728d0548d37020c060c9f6068d89a52e9a8d072521e328562299eafcfcb3b487182ba4a0b0eeeca26a026abf9c01", @ANYRES32, @ANYBLOB="000000000000001f760000000000000018010000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000e211bc107676d575af310d20005f4b201fe86b4262b029e2dda3d23a1f14c6d04b239d68ae23213cb77a3f57cd6696ee713e1364e501060c0d136a667f846f03f548681ed57d36fc4b9be5c1a8919f4897f76a5de2c5d9f6f553360714b78c74bd543fa6b0ae4e1606d499cb2a9a74df00a16e8ea12e503b616a4730bd4eea63"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0xfffffe53, 0x10000, {{0x36, 0x4, 0x3, 0x1e, 0xd8, 0x68, 0x0, 0x6, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xb}, {[@noop, @cipso={0x86, 0x31, 0x2, [{0x0, 0x8, "36c9d3023bf6"}, {0x7, 0x6, "aa9b9f82"}, {0x6, 0x11, "9210121a14791551bbe34ec14ad378"}, {0x6, 0x4, 'Np'}, {0x0, 0x8, "966d05a1c8e9"}]}, @rr={0x7, 0x17, 0x66, [@remote, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x27, 0x31, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @local, @empty]}, @lsrr={0x83, 0x7, 0xaa, [@multicast1]}, @lsrr={0x83, 0xb, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_prespec={0x44, 0x3c, 0x85, 0x3, 0x8, [{@rand_addr=0x64010102, 0x5b92}, {@private=0xa010101, 0x9}, {@private=0xa010100, 0xd410}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x1000}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x9}]}, @ra={0x94, 0x4}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x8, 0x100, 0x5}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x3ff, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x6, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @alu={0x7, 0x1, 0x1, 0x7, 0x2, 0x2, 0x10}, @exit, @ldst={0x2, 0x1, 0x3, 0x1, 0x4, 0x4, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41100, 0x11, '\x00', r1, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xe, 0x910, 0xc7}, 0x10, 0xffffffffffffffff, r2, 0x1, &(0x7f0000000440)=[0x1, r3], &(0x7f0000000500)=[{0x5, 0x3, 0x10, 0x2}], 0x10, 0x1}, 0x90) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 07:31:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000000000000080000174a197b7d927f6400fbabef4353bae3156ce9b30ceb812110cb39e4edd36512054241ad8c4172201fea8c34e5e4f730e511982a5501ecc19634bfa7eb289267a34e33f243728d0548d37020c060c9f6068d89a52e9a8d072521e328562299eafcfcb3b487182ba4a0b0eeeca26a026abf9c01", @ANYRES32, @ANYBLOB="000000000000001f760000000000000018010000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000e211bc107676d575af310d20005f4b201fe86b4262b029e2dda3d23a1f14c6d04b239d68ae23213cb77a3f57cd6696ee713e1364e501060c0d136a667f846f03f548681ed57d36fc4b9be5c1a8919f4897f76a5de2c5d9f6f553360714b78c74bd543fa6b0ae4e1606d499cb2a9a74df00a16e8ea12e503b616a4730bd4eea63"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0xfffffe53, 0x10000, {{0x36, 0x4, 0x3, 0x1e, 0xd8, 0x68, 0x0, 0x6, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xb}, {[@noop, @cipso={0x86, 0x31, 0x2, [{0x0, 0x8, "36c9d3023bf6"}, {0x7, 0x6, "aa9b9f82"}, {0x6, 0x11, "9210121a14791551bbe34ec14ad378"}, {0x6, 0x4, 'Np'}, {0x0, 0x8, "966d05a1c8e9"}]}, @rr={0x7, 0x17, 0x66, [@remote, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x27, 0x31, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @local, @empty]}, @lsrr={0x83, 0x7, 0xaa, [@multicast1]}, @lsrr={0x83, 0xb, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_prespec={0x44, 0x3c, 0x85, 0x3, 0x8, [{@rand_addr=0x64010102, 0x5b92}, {@private=0xa010101, 0x9}, {@private=0xa010100, 0xd410}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x1000}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x9}]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x8, 0x100, 0x5}) (async, rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x3ff, 0x400200) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x6, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @alu={0x7, 0x1, 0x1, 0x7, 0x2, 0x2, 0x10}, @exit, @ldst={0x2, 0x1, 0x3, 0x1, 0x4, 0x4, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41100, 0x11, '\x00', r1, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xe, 0x910, 0xc7}, 0x10, 0xffffffffffffffff, r2, 0x1, &(0x7f0000000440)=[0x1, r3], &(0x7f0000000500)=[{0x5, 0x3, 0x10, 0x2}], 0x10, 0x1}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 07:31:44 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200"], 0x42) 07:31:44 executing program 3: r0 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40000400) socket$inet(0x2, 0xa, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0xc3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) r2 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x9e, 0x680) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000003c0), 0x2, 0x0) sendfile(r1, r4, 0x0, 0xb2) lseek(r2, 0x0, 0x4) sendfile(r2, r2, &(0x7f00000001c0), 0x7fa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000e4313f55ae0ffe690000000000000000000000001d04000000230000008518033e8ef5c55ed5a4685016da08fa4c81c861ea65d3a1e1ae1a4de589fb8cdb8d376ad6aa8f1802327e881a8d1800f2f76faf223d606f0645a01094e55c8f798de99152caa9722721cf6ec242158562a0d04cae4f375f6cfcf3692fea18"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r5], 0xfd83) flistxattr(r4, &(0x7f00000002c0)=""/146, 0x92) chdir(&(0x7f0000000140)='./file0\x00') fadvise64(r6, 0x4, 0x6, 0x5) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = pidfd_open(r0, 0x0) pidfd_send_signal(r7, 0x9, 0x0, 0x0) process_mrelease(r7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 07:31:44 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xa00, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xb00, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xc00, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:44 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200"], 0x42) 07:31:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xd00, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xe00, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xec0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:45 executing program 3: r0 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare(0x40000400) (async) socket$inet(0x2, 0xa, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0xc3) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) (async) umount2(&(0x7f0000000040)='./file0\x00', 0xc) (async) r2 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x9e, 0x680) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000003c0), 0x2, 0x0) sendfile(r1, r4, 0x0, 0xb2) (async) lseek(r2, 0x0, 0x4) (async) sendfile(r2, r2, &(0x7f00000001c0), 0x7fa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000e4313f55ae0ffe690000000000000000000000001d04000000230000008518033e8ef5c55ed5a4685016da08fa4c81c861ea65d3a1e1ae1a4de589fb8cdb8d376ad6aa8f1802327e881a8d1800f2f76faf223d606f0645a01094e55c8f798de99152caa9722721cf6ec242158562a0d04cae4f375f6cfcf3692fea18"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r5], 0xfd83) (async) flistxattr(r4, &(0x7f00000002c0)=""/146, 0x92) chdir(&(0x7f0000000140)='./file0\x00') (async) fadvise64(r6, 0x4, 0x6, 0x5) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = pidfd_open(r0, 0x0) pidfd_send_signal(r7, 0x9, 0x0, 0x0) process_mrelease(r7, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 07:31:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bc"], 0x42) 07:31:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xf00, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:45 executing program 3: r0 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare(0x40000400) (async) socket$inet(0x2, 0xa, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f00000004c0)='./file0\x00', 0xc3) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) (async, rerun: 32) umount2(&(0x7f0000000040)='./file0\x00', 0xc) (async) r2 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x9e, 0x680) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000003c0), 0x2, 0x0) sendfile(r1, r4, 0x0, 0xb2) (async) lseek(r2, 0x0, 0x4) (async) sendfile(r2, r2, &(0x7f00000001c0), 0x7fa) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000e4313f55ae0ffe690000000000000000000000001d04000000230000008518033e8ef5c55ed5a4685016da08fa4c81c861ea65d3a1e1ae1a4de589fb8cdb8d376ad6aa8f1802327e881a8d1800f2f76faf223d606f0645a01094e55c8f798de99152caa9722721cf6ec242158562a0d04cae4f375f6cfcf3692fea18"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) (async) write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r5], 0xfd83) (async) flistxattr(r4, &(0x7f00000002c0)=""/146, 0x92) chdir(&(0x7f0000000140)='./file0\x00') fadvise64(r6, 0x4, 0x6, 0x5) (async) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, 0x0) (async) umount2(&(0x7f0000000100)='./file0\x00', 0x2) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = pidfd_open(r0, 0x0) pidfd_send_signal(r7, 0x9, 0x0, 0x0) process_mrelease(r7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 07:31:45 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:45 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x1100, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x1200, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bc"], 0x42) 07:31:46 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:46 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x1400, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x2500, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bc"], 0x42) 07:31:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x3400, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600"], 0x42) [ 127.103250][ T6562] validate_nla: 13 callbacks suppressed [ 127.103264][ T6562] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 127.117783][ T6562] __nla_validate_parse: 13 callbacks suppressed [ 127.117794][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:46 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x4601, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600"], 0x42) 07:31:46 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:46 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 127.815869][ T6571] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 127.824399][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:46 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x4800, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x4c00, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600"], 0x42) [ 127.890502][ T6578] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 127.899279][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.967684][ T6585] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 127.976323][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x6000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:31:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x6800, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 128.053700][ T6589] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 128.062061][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.102391][ T6591] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 128.110745][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008"], 0x42) 07:31:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x6c00, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:47 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:47 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:47 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 128.815008][ T6600] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 128.823545][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:48 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x7400, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008"], 0x42) 07:31:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x7a00, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 128.921593][ T6608] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 128.930065][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade60008"], 0x42) 07:31:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xc00e, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 128.996445][ T6615] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 129.004724][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xfa09, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xfb09, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 129.081546][ T6620] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 129.089925][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:48 executing program 5: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:48 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x34000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:48 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:49 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x400300, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:49 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xe0ffff, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x1000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x2000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (fail_nth: 1) 07:31:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x3000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 130.166879][ T6655] FAULT_INJECTION: forcing a failure. [ 130.166879][ T6655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.180264][ T6655] CPU: 1 PID: 6655 Comm: syz-executor.5 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 130.190845][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 130.200908][ T6655] Call Trace: [ 130.204196][ T6655] [ 130.207163][ T6655] dump_stack_lvl+0xda/0x130 [ 130.211835][ T6655] dump_stack+0x15/0x20 07:31:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x4000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 130.216121][ T6655] should_fail_ex+0x21f/0x230 [ 130.221076][ T6655] should_fail+0xb/0x10 [ 130.225240][ T6655] should_fail_usercopy+0x1a/0x20 [ 130.230270][ T6655] _copy_from_iter+0xd8/0xa90 [ 130.234971][ T6655] ? _parse_integer_limit+0x167/0x180 [ 130.240376][ T6655] tun_get_user+0x12c/0x2300 [ 130.245054][ T6655] ? ref_tracker_alloc+0x1f3/0x2f0 [ 130.250241][ T6655] tun_chr_write_iter+0x18e/0x240 [ 130.255381][ T6655] vfs_write+0x4ab/0x7d0 [ 130.259704][ T6655] ksys_write+0xeb/0x1a0 [ 130.263961][ T6655] __x64_sys_write+0x42/0x50 [ 130.268569][ T6655] do_syscall_64+0x41/0xc0 [ 130.273006][ T6655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.278911][ T6655] RIP: 0033:0x7f39a87e1ae9 [ 130.283336][ T6655] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 130.303510][ T6655] RSP: 002b:00007f39a7b640c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.312151][ T6655] RAX: ffffffffffffffda RBX: 00007f39a8900f80 RCX: 00007f39a87e1ae9 [ 130.320183][ T6655] RDX: 0000000000000042 RSI: 00000000200001c0 RDI: 0000000000000003 [ 130.328149][ T6655] RBP: 00007f39a7b64120 R08: 0000000000000000 R09: 0000000000000000 [ 130.336274][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.344462][ T6655] R13: 000000000000000b R14: 00007f39a8900f80 R15: 00007fffc1c82388 [ 130.352728][ T6655] 07:31:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x5000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (fail_nth: 2) [ 130.668232][ T6663] FAULT_INJECTION: forcing a failure. [ 130.668232][ T6663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.681566][ T6663] CPU: 0 PID: 6663 Comm: syz-executor.5 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 130.692010][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 130.702168][ T6663] Call Trace: [ 130.705526][ T6663] [ 130.708475][ T6663] dump_stack_lvl+0xda/0x130 [ 130.713159][ T6663] dump_stack+0x15/0x20 [ 130.717349][ T6663] should_fail_ex+0x21f/0x230 [ 130.722079][ T6663] should_fail+0xb/0x10 [ 130.726390][ T6663] should_fail_usercopy+0x1a/0x20 [ 130.731465][ T6663] _copy_from_iter+0xd8/0xa90 [ 130.736316][ T6663] ? should_fail_ex+0xd1/0x230 [ 130.741127][ T6663] ? __virt_addr_valid+0x16a/0x1b0 [ 130.746301][ T6663] ? __check_object_size+0x364/0x510 [ 130.751927][ T6663] skb_copy_datagram_from_iter+0xba/0x430 [ 130.757830][ T6663] tun_get_user+0x125d/0x2300 [ 130.762628][ T6663] tun_chr_write_iter+0x18e/0x240 [ 130.767995][ T6663] vfs_write+0x4ab/0x7d0 [ 130.772369][ T6663] ksys_write+0xeb/0x1a0 [ 130.776706][ T6663] __x64_sys_write+0x42/0x50 [ 130.781335][ T6663] do_syscall_64+0x41/0xc0 [ 130.785756][ T6663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.791764][ T6663] RIP: 0033:0x7f39a87e1ae9 [ 130.796265][ T6663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 07:31:49 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 130.816187][ T6663] RSP: 002b:00007f39a7b640c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.824832][ T6663] RAX: ffffffffffffffda RBX: 00007f39a8900f80 RCX: 00007f39a87e1ae9 [ 130.832795][ T6663] RDX: 0000000000000042 RSI: 00000000200001c0 RDI: 0000000000000003 [ 130.840855][ T6663] RBP: 00007f39a7b64120 R08: 0000000000000000 R09: 0000000000000000 [ 130.848904][ T6663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.857038][ T6663] R13: 000000000000000b R14: 00007f39a8900f80 R15: 00007fffc1c82388 [ 130.865135][ T6663] 07:31:50 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:50 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x6000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:50 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (fail_nth: 3) 07:31:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x7000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x8000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 130.980613][ T6674] FAULT_INJECTION: forcing a failure. [ 130.980613][ T6674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.993918][ T6674] CPU: 1 PID: 6674 Comm: syz-executor.5 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 131.004352][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 131.014527][ T6674] Call Trace: [ 131.017810][ T6674] [ 131.020751][ T6674] dump_stack_lvl+0xda/0x130 [ 131.025406][ T6674] dump_stack+0x15/0x20 07:31:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x9000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 131.029590][ T6674] should_fail_ex+0x21f/0x230 [ 131.034371][ T6674] should_fail+0xb/0x10 [ 131.038732][ T6674] should_fail_usercopy+0x1a/0x20 [ 131.043839][ T6674] _copy_from_iter+0xd8/0xa90 [ 131.048618][ T6674] ? __alloc_pages+0x193/0x340 [ 131.053607][ T6674] ? __virt_addr_valid+0x16a/0x1b0 [ 131.058922][ T6674] ? __check_object_size+0x364/0x510 [ 131.064271][ T6674] skb_copy_datagram_from_iter+0xba/0x430 [ 131.070032][ T6674] tun_get_user+0x125d/0x2300 [ 131.075156][ T6674] tun_chr_write_iter+0x18e/0x240 [ 131.080218][ T6674] vfs_write+0x4ab/0x7d0 [ 131.084485][ T6674] ksys_write+0xeb/0x1a0 [ 131.088918][ T6674] __x64_sys_write+0x42/0x50 [ 131.093729][ T6674] do_syscall_64+0x41/0xc0 [ 131.098242][ T6674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.104160][ T6674] RIP: 0033:0x7f39a87e1ae9 [ 131.108582][ T6674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 131.128895][ T6674] RSP: 002b:00007f39a7b640c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.137570][ T6674] RAX: ffffffffffffffda RBX: 00007f39a8900f80 RCX: 00007f39a87e1ae9 [ 131.145803][ T6674] RDX: 0000000000000042 RSI: 00000000200001c0 RDI: 0000000000000003 [ 131.154191][ T6674] RBP: 00007f39a7b64120 R08: 0000000000000000 R09: 0000000000000000 [ 131.162447][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.171368][ T6674] R13: 000000000000000b R14: 00007f39a8900f80 R15: 00007fffc1c82388 07:31:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xa000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 131.180258][ T6674] 07:31:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xb000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xc000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:50 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (fail_nth: 4) [ 131.844096][ T6695] FAULT_INJECTION: forcing a failure. [ 131.844096][ T6695] name failslab, interval 1, probability 0, space 0, times 0 [ 131.856851][ T6695] CPU: 1 PID: 6695 Comm: syz-executor.5 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 131.867199][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 131.877358][ T6695] Call Trace: [ 131.880920][ T6695] [ 131.883886][ T6695] dump_stack_lvl+0xda/0x130 [ 131.888531][ T6695] dump_stack+0x15/0x20 [ 131.892795][ T6695] should_fail_ex+0x21f/0x230 [ 131.897505][ T6695] ? nf_ct_ext_add+0xed/0x1b0 [ 131.902221][ T6695] __should_failslab+0x92/0xa0 [ 131.907260][ T6695] should_failslab+0x9/0x20 [ 131.911775][ T6695] slab_pre_alloc_hook+0x38/0x180 [ 131.916973][ T6695] ? nf_ct_ext_add+0xed/0x1b0 [ 131.921684][ T6695] __kmem_cache_alloc_node+0x48/0x1d0 [ 131.927207][ T6695] ? nf_ct_ext_add+0xed/0x1b0 [ 131.932032][ T6695] __kmalloc_node_track_caller+0x96/0x1a0 [ 131.937759][ T6695] ? __nf_conntrack_alloc+0xcd/0x280 [ 131.943059][ T6695] krealloc+0x48/0xa0 [ 131.947281][ T6695] nf_ct_ext_add+0xed/0x1b0 [ 131.951809][ T6695] init_conntrack+0x539/0x960 [ 131.956659][ T6695] nf_conntrack_in+0x899/0xf20 [ 131.961652][ T6695] ipv6_conntrack_in+0x1d/0x30 [ 131.966440][ T6695] ? ipv4_conntrack_local+0x150/0x150 [ 131.972035][ T6695] nf_hook_slow_list+0x12b/0x320 [ 131.977074][ T6695] ip6_sublist_rcv+0x991/0x9b0 [ 131.981845][ T6695] ? __netif_receive_skb_core+0x1d71/0x21e0 [ 131.987750][ T6695] ? __rcu_read_unlock+0x33/0x70 [ 131.992940][ T6695] ? ip6_rcv_core+0x927/0xa40 [ 131.997617][ T6695] ? net_zcopy_put_abort+0x70/0x70 [ 132.002804][ T6695] ipv6_list_rcv+0x265/0x290 [ 132.007394][ T6695] ? ip6_rcv_core+0xa40/0xa40 [ 132.012069][ T6695] __netif_receive_skb_list_core+0x356/0x460 [ 132.018347][ T6695] netif_receive_skb_list_internal+0x4e6/0x660 [ 132.024504][ T6695] napi_complete_done+0x1cb/0x450 [ 132.029525][ T6695] ? napi_schedule_prep+0xee/0x130 [ 132.034725][ T6695] ? tun_get_user+0x1b2e/0x2300 [ 132.039764][ T6695] tun_get_user+0x1b4b/0x2300 [ 132.044639][ T6695] tun_chr_write_iter+0x18e/0x240 [ 132.049758][ T6695] vfs_write+0x4ab/0x7d0 [ 132.054003][ T6695] ksys_write+0xeb/0x1a0 [ 132.058259][ T6695] __x64_sys_write+0x42/0x50 [ 132.062888][ T6695] do_syscall_64+0x41/0xc0 [ 132.067401][ T6695] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.073290][ T6695] RIP: 0033:0x7f39a87e1ae9 [ 132.077774][ T6695] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 132.097640][ T6695] RSP: 002b:00007f39a7b640c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.106040][ T6695] RAX: ffffffffffffffda RBX: 00007f39a8900f80 RCX: 00007f39a87e1ae9 [ 132.114075][ T6695] RDX: 0000000000000042 RSI: 00000000200001c0 RDI: 0000000000000003 [ 132.122062][ T6695] RBP: 00007f39a7b64120 R08: 0000000000000000 R09: 0000000000000000 [ 132.130038][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.138099][ T6695] R13: 000000000000000b R14: 00007f39a8900f80 R15: 00007fffc1c82388 [ 132.146070][ T6695] 07:31:51 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xd000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:51 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:51 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (fail_nth: 5) [ 132.201684][ T6703] validate_nla: 17 callbacks suppressed [ 132.201697][ T6703] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 132.215698][ T6703] __nla_validate_parse: 17 callbacks suppressed [ 132.215709][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xe000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 132.274045][ T6710] FAULT_INJECTION: forcing a failure. [ 132.274045][ T6710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.287312][ T6710] CPU: 1 PID: 6710 Comm: syz-executor.5 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 132.297733][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 132.307905][ T6710] Call Trace: [ 132.311210][ T6710] [ 132.314166][ T6710] dump_stack_lvl+0xda/0x130 [ 132.318783][ T6710] dump_stack+0x15/0x20 [ 132.322962][ T6710] should_fail_ex+0x21f/0x230 [ 132.327739][ T6710] should_fail+0xb/0x10 [ 132.332094][ T6710] should_fail_usercopy+0x1a/0x20 [ 132.337216][ T6710] _copy_to_user+0x1e/0x90 [ 132.341646][ T6710] simple_read_from_buffer+0xa0/0x110 [ 132.347030][ T6710] proc_fail_nth_read+0xfc/0x140 [ 132.352487][ T6710] ? proc_fault_inject_write+0x210/0x210 [ 132.358192][ T6710] vfs_read+0x19f/0x5c0 [ 132.362416][ T6710] ? __fget_files+0x1c4/0x200 [ 132.367102][ T6710] ? mutex_lock+0xd/0x30 [ 132.371430][ T6710] ksys_read+0xeb/0x1a0 [ 132.375664][ T6710] __x64_sys_read+0x42/0x50 [ 132.380337][ T6710] do_syscall_64+0x41/0xc0 [ 132.384754][ T6710] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.390753][ T6710] RIP: 0033:0x7f39a87e078c [ 132.395210][ T6710] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 132.415111][ T6710] RSP: 002b:00007f39a7b640c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.423745][ T6710] RAX: ffffffffffffffda RBX: 00007f39a8900f80 RCX: 00007f39a87e078c [ 132.431722][ T6710] RDX: 000000000000000f RSI: 00007f39a7b64130 RDI: 0000000000000005 [ 132.439767][ T6710] RBP: 00007f39a7b64120 R08: 0000000000000000 R09: 0000000000000000 [ 132.447879][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.455897][ T6710] R13: 000000000000000b R14: 00007f39a8900f80 R15: 00007fffc1c82388 [ 132.464118][ T6710] 07:31:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xf000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) [ 132.486234][ T6714] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 132.494535][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.519307][ T6716] netlink: 'syz-executor.4': attribute type 195 has an invalid length. 07:31:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x10000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 132.527804][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x11000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 132.563353][ T6720] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 132.571694][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.601376][ T6722] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 132.609973][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="08000000ffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:31:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x12000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 132.820649][ T6726] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 132.829012][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:52 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:52 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:52 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 07:31:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x14000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000008ffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:31:52 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x25000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 133.190316][ T6733] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 133.198755][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff08000000ffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:31:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x34000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 133.258686][ T6742] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 133.267087][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x46010000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 133.349510][ T6748] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 133.357962][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x48000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff00000008ffffffffffffff8200020086dd60bcade6000829"], 0x42) [ 133.395446][ T6751] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 133.403808][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:53 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:53 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffff08000000ffffffffffff8200020086dd60bcade6000829"], 0x42) 07:31:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x4c000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:53 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 07:31:53 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x60000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x68000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffff00000008ffffffffffff8200020086dd60bcade6000829"], 0x42) 07:31:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x6c000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x74000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x7a000000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xc00e0000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xf0ffffff, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:54 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:54 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffff08000000ffffffffff8200020086dd60bcade6000829"], 0x42) 07:31:54 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) 07:31:54 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xfa090000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xfb090000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffff00000008ffffffffff8200020086dd60bcade6000829"], 0x42) 07:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xffffe000, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xffffff7f, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0xfffffff0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:54 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:54 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffff08000000ffffffff8200020086dd60bcade6000829"], 0x42) 07:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x2, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:55 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 07:31:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x3, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:55 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffff00000008ffffffff8200020086dd60bcade6000829"], 0x42) 07:31:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x4, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x5, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffff08000000ffffff8200020086dd60bcade6000829"], 0x42) 07:31:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x6, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:55 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(0x0, 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:55 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x7, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffff00000008ffffff8200020086dd60bcade6000829"], 0x42) 07:31:55 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 07:31:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x8, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:56 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x9, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff08000000ffff8200020086dd60bcade6000829"], 0x42) 07:31:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xa, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xb, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xc, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:56 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(0x0, 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xd, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000008ffff8200020086dd60bcade6000829"], 0x42) 07:31:56 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:31:56 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xe, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 137.666984][ T6881] validate_nla: 26 callbacks suppressed [ 137.666998][ T6881] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 137.681999][ T6881] __nla_validate_parse: 26 callbacks suppressed [ 137.682013][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.759698][ T6889] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 137.768279][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:57 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffff08000000ff8200020086dd60bcade6000829"], 0x42) 07:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xf, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:57 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x10, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffff00000008ff8200020086dd60bcade6000829"], 0x42) [ 137.984127][ T6895] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 137.992730][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.046945][ T6901] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 138.055331][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:57 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x11, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffff080000008200020086dd60bcade6000829"], 0x42) 07:31:57 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(0x0, 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x12, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 138.521607][ T6908] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 138.530083][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffff000000088200020086dd60bcade6000829"], 0x42) [ 138.603345][ T6914] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 138.612047][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x14, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8202020086dd60bcade6000829"], 0x42) 07:31:57 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:57 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(0x0, 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:57 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 07:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x25, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 138.708451][ T6921] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 138.717041][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8203020086dd60bcade6000829"], 0x42) 07:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x34, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 138.767876][ T6929] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 138.776387][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x48, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 138.857506][ T6936] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 138.866180][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.897356][ T6939] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 138.905794][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:31:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8204020086dd60bcade6000829"], 0x42) 07:31:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x4c, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:58 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 07:31:58 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(0x0, 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:58 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:58 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x60, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x68, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8205020086dd60bcade6000829"], 0x42) 07:31:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x6c, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x74, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x7a, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8206020086dd60bcade6000829"], 0x42) 07:31:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x146, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x300, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:58 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(0x0, 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:59 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 07:31:59 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:59 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x500, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8207020086dd60bcade6000829"], 0x42) 07:31:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x600, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x700, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x900, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8209020086dd60bcade6000829"], 0x42) 07:31:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x9fa, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x9fb, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:31:59 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:31:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xa00, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:00 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, 0xffffffffffffffff, 0x0) 07:32:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8228020086dd60bcade6000829"], 0x42) 07:32:00 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xb00, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:00 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xc00, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8230020086dd60bcade6000829"], 0x42) 07:32:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xd00, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xe00, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xec0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff823e020086dd60bcade6000829"], 0x42) 07:32:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xf00, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:00 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, 0xffffffffffffffff, 0x0) 07:32:00 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:00 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x1100, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:00 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x108000000) 07:32:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x1200, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8250020086dd60bcade6000829"], 0x42) 07:32:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x1400, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x2500, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x3400, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x4601, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff82fc020086dd60bcade6000829"], 0x42) 07:32:01 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, 0xffffffffffffffff, 0x0) 07:32:01 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:01 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200030086dd60bcade6000829"], 0x42) 07:32:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x4800, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:01 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:01 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x108000000) 07:32:01 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x4c00, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:01 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x6000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200030086dd60bcade6000829"], 0x42) 07:32:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x6800, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 142.697293][ T7093] validate_nla: 30 callbacks suppressed [ 142.697309][ T7093] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 142.711524][ T7093] __nla_validate_parse: 30 callbacks suppressed [ 142.711535][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:02 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(0x0, 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:02 executing program 3: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200040086dd60bcade6000829"], 0x42) 07:32:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x6c00, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:02 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x108000000) 07:32:02 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x7400, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 143.405601][ T7099] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 143.413886][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x7a00, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020005dd60bcade6000829"], 0x42) [ 143.467741][ T7109] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 143.476417][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:02 executing program 3: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xc00e, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020286dd60bcade6000829"], 0x42) [ 143.543356][ T7114] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 143.551722][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.561681][ T27] audit: type=1400 audit(1695627122.645:312): avc: denied { unlink } for pid=2760 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.603645][ T7118] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 143.612407][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020386dd60bcade6000829"], 0x42) 07:32:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xfa09, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:03 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(0x0, 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:03 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x108000000) 07:32:03 executing program 3: io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) [ 144.181179][ T7126] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 144.189606][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xfb09, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020486dd60bcade6000829"], 0x42) 07:32:03 executing program 3: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:03 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x34000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 144.341227][ T7137] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 144.349530][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020586dd60bcade6000829"], 0x42) 07:32:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x400300, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 144.400409][ T7142] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 144.408815][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.436005][ T7145] netlink: 'syz-executor.4': attribute type 195 has an invalid length. 07:32:03 executing program 3: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) [ 144.444317][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xe0ffff, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 144.975496][ T7151] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 144.983857][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:04 executing program 3: r0 = creat(0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020686dd60bcade6000829"], 0x42) 07:32:04 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(0x0, 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x1000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:04 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x108000000) 07:32:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x2000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x3000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:04 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020786dd60bcade6000829"], 0x42) 07:32:04 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:04 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:04 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x4000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:04 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x5000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:04 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:05 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x108000000) 07:32:05 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020986dd60bcade6000829"], 0x42) 07:32:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x6000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:05 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:05 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:05 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x7000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x8000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x9000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200022886dd60bcade6000829"], 0x42) 07:32:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xa000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:05 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x0) 07:32:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xb000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:05 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200023086dd60bcade6000829"], 0x42) 07:32:05 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:05 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xc000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xd000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xe000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:06 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200023e86dd60bcade6000829"], 0x42) 07:32:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xf000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:06 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x0) 07:32:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x10000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:06 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200025086dd60bcade6000829"], 0x42) 07:32:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x11000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:06 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:06 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff820002fc86dd60bcade6000829"], 0x42) 07:32:06 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x108000000) 07:32:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x12000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x14000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x25000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 147.750818][ T7268] validate_nla: 19 callbacks suppressed [ 147.750832][ T7268] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 147.764849][ T7268] __nla_validate_parse: 19 callbacks suppressed [ 147.764859][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:07 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x0) 07:32:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020005dd60bcade6000829"], 0x42) 07:32:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x34000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:07 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:07 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x46010000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 148.382948][ T7275] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 148.391659][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x48000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 148.441005][ T7281] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 148.449442][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:07 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) [ 148.483321][ T7284] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 148.491664][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:07 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x108000000) 07:32:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6020829"], 0x42) 07:32:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x4c000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:07 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) [ 148.558614][ T7290] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 148.566984][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x60000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6030829"], 0x42) 07:32:08 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:08 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x68000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:08 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) [ 149.087074][ T7299] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 149.095791][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6040829"], 0x42) 07:32:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x6c000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 149.159877][ T7306] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 149.168558][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.240827][ T7313] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 149.249207][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:08 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x74000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6050829"], 0x42) 07:32:08 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x108000000) 07:32:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x7a000000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 149.542592][ T7321] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 149.550936][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xc00e0000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:08 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) [ 149.606197][ T7325] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 149.614797][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:09 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) 07:32:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6060829"], 0x42) 07:32:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xf0ffffff, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:09 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:09 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xfa090000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xfb090000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:09 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:09 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x108000000) 07:32:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6070829"], 0x42) 07:32:09 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xffffe000, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:10 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6090829"], 0x42) 07:32:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xffffff7f, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:10 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:10 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x108000000) 07:32:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0xfffffff0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x2}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:10 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:10 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x108000000) 07:32:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6280829"], 0x42) 07:32:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x5}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:10 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x6}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6300829"], 0x42) 07:32:10 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 07:32:10 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) 07:32:11 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x108000000) 07:32:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x7}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade63e0829"], 0x42) 07:32:11 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x8}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6500829"], 0x42) 07:32:11 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:11 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x108000000) 07:32:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x9}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0xa}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:11 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 07:32:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6fc0829"], 0x42) 07:32:12 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x108000000) 07:32:12 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0xb}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6002829"], 0x42) 07:32:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0xc}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0xe}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0xf}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6009529"], 0x42) 07:32:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x10}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:12 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x0) 07:32:12 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/108, 0x6c, 0x8, 0x800}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 07:32:12 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x11}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:12 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x108000000) 07:32:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000229"], 0x42) 07:32:13 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x12}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 153.887825][ T7452] validate_nla: 8 callbacks suppressed [ 153.887840][ T7452] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 153.901909][ T7452] __nla_validate_parse: 8 callbacks suppressed [ 153.901922][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x13}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6002829"], 0x42) 07:32:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x14}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x15}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 154.067957][ T7470] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 154.076465][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:13 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x0) 07:32:13 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 1) 07:32:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6009529"], 0x42) 07:32:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x16}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:13 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x108000000) [ 154.819138][ T7482] FAULT_INJECTION: forcing a failure. [ 154.819138][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 154.832460][ T7482] CPU: 0 PID: 7482 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 154.842886][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 154.853007][ T7482] Call Trace: [ 154.856390][ T7482] [ 154.859314][ T7482] dump_stack_lvl+0xda/0x130 [ 154.864061][ T7482] dump_stack+0x15/0x20 [ 154.868250][ T7482] should_fail_ex+0x21f/0x230 [ 154.872955][ T7482] ? alloc_pipe_info+0xaf/0x360 [ 154.878055][ T7482] __should_failslab+0x92/0xa0 [ 154.882911][ T7482] should_failslab+0x9/0x20 [ 154.887462][ T7482] slab_pre_alloc_hook+0x38/0x180 [ 154.892597][ T7482] ? alloc_pipe_info+0xaf/0x360 [ 154.897596][ T7482] __kmem_cache_alloc_node+0x48/0x1d0 [ 154.903055][ T7482] ? alloc_pipe_info+0xaf/0x360 [ 154.908249][ T7482] kmalloc_trace+0x2a/0xa0 [ 154.912681][ T7482] alloc_pipe_info+0xaf/0x360 [ 154.917521][ T7482] splice_direct_to_actor+0x636/0x690 [ 154.923033][ T7482] ? fsnotify_perm+0x58/0x3b0 [ 154.928071][ T7482] ? direct_file_splice_eof+0x70/0x70 [ 154.933460][ T7482] ? security_file_permission+0x5a/0x70 [ 154.939121][ T7482] do_splice_direct+0x10d/0x190 [ 154.944077][ T7482] ? do_splice_direct+0x190/0x190 [ 154.949302][ T7482] do_sendfile+0x3b6/0x9a0 [ 154.953833][ T7482] __x64_sys_sendfile64+0x110/0x150 [ 154.959222][ T7482] do_syscall_64+0x41/0xc0 [ 154.963735][ T7482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 154.969760][ T7482] RIP: 0033:0x7f6a4e1c7ae9 [ 154.974180][ T7482] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 154.993881][ T7482] RSP: 002b:00007f6a4d5080c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 155.002351][ T7482] RAX: ffffffffffffffda RBX: 00007f6a4e2e7120 RCX: 00007f6a4e1c7ae9 [ 155.010560][ T7482] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 07:32:14 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x17}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000804"], 0x42) 07:32:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x18}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 155.018537][ T7482] RBP: 00007f6a4d508120 R08: 0000000000000000 R09: 0000000000000000 [ 155.026502][ T7482] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.034556][ T7482] R13: 000000000000006e R14: 00007f6a4e2e7120 R15: 00007ffcf6974a68 [ 155.042632][ T7482] 07:32:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x19}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000806"], 0x42) 07:32:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x1a}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x1b}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:14 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 2) 07:32:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000811"], 0x42) 07:32:14 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x0) [ 155.784894][ T7510] FAULT_INJECTION: forcing a failure. [ 155.784894][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 155.797727][ T7510] CPU: 1 PID: 7510 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 155.808075][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 155.818313][ T7510] Call Trace: [ 155.821641][ T7510] [ 155.824656][ T7510] dump_stack_lvl+0xda/0x130 [ 155.829290][ T7510] dump_stack+0x15/0x20 [ 155.833596][ T7510] should_fail_ex+0x21f/0x230 [ 155.838311][ T7510] ? alloc_pipe_info+0x1ca/0x360 [ 155.843277][ T7510] __should_failslab+0x92/0xa0 [ 155.848149][ T7510] should_failslab+0x9/0x20 [ 155.852939][ T7510] slab_pre_alloc_hook+0x38/0x180 [ 155.858020][ T7510] ? alloc_pipe_info+0x1ca/0x360 [ 155.862961][ T7510] ? alloc_pipe_info+0x1ca/0x360 [ 155.867947][ T7510] __kmem_cache_alloc_node+0x48/0x1d0 [ 155.873460][ T7510] ? alloc_pipe_info+0x1ca/0x360 [ 155.878551][ T7510] __kmalloc+0x95/0x1a0 [ 155.882720][ T7510] ? kmalloc_trace+0x2a/0xa0 [ 155.887384][ T7510] alloc_pipe_info+0x1ca/0x360 [ 155.892150][ T7510] splice_direct_to_actor+0x636/0x690 [ 155.897708][ T7510] ? fsnotify_perm+0x58/0x3b0 [ 155.903698][ T7510] ? direct_file_splice_eof+0x70/0x70 [ 155.909204][ T7510] ? security_file_permission+0x5a/0x70 [ 155.914818][ T7510] do_splice_direct+0x10d/0x190 [ 155.919830][ T7510] ? do_splice_direct+0x190/0x190 [ 155.924870][ T7510] do_sendfile+0x3b6/0x9a0 [ 155.929401][ T7510] __x64_sys_sendfile64+0x110/0x150 [ 155.934632][ T7510] do_syscall_64+0x41/0xc0 [ 155.939113][ T7510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.945051][ T7510] RIP: 0033:0x7f6a4e1c7ae9 [ 155.949478][ T7510] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 155.969615][ T7510] RSP: 002b:00007f6a4d5290c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 155.978107][ T7510] RAX: ffffffffffffffda RBX: 00007f6a4e2e7050 RCX: 00007f6a4e1c7ae9 [ 155.986071][ T7510] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 155.994035][ T7510] RBP: 00007f6a4d529120 R08: 0000000000000000 R09: 0000000000000000 [ 156.002026][ T7510] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.010096][ T7510] R13: 000000000000006e R14: 00007f6a4e2e7050 R15: 00007ffcf6974a68 [ 156.018429][ T7510] 07:32:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x1c}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:15 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000821"], 0x42) 07:32:15 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x108000000) 07:32:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x1d}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600082b"], 0x42) 07:32:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x21}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x25}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x26}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:15 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 3) 07:32:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x27}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600082c"], 0x42) 07:32:15 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r2, 0x0) 07:32:15 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 1) 07:32:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x28}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 156.739597][ T7538] FAULT_INJECTION: forcing a failure. [ 156.739597][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 156.752255][ T7538] CPU: 0 PID: 7538 Comm: syz-executor.2 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 156.752552][ T7544] FAULT_INJECTION: forcing a failure. [ 156.752552][ T7544] name failslab, interval 1, probability 0, space 0, times 0 [ 156.762570][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 156.762584][ T7538] Call Trace: [ 156.762591][ T7538] [ 156.762598][ T7538] dump_stack_lvl+0xda/0x130 [ 156.762622][ T7538] dump_stack+0x15/0x20 [ 156.800349][ T7538] should_fail_ex+0x21f/0x230 [ 156.805093][ T7538] ? alloc_pipe_info+0xaf/0x360 [ 156.809973][ T7538] __should_failslab+0x92/0xa0 [ 156.814825][ T7538] should_failslab+0x9/0x20 [ 156.819412][ T7538] slab_pre_alloc_hook+0x38/0x180 [ 156.824462][ T7538] ? alloc_pipe_info+0xaf/0x360 [ 156.829311][ T7538] __kmem_cache_alloc_node+0x48/0x1d0 [ 156.834749][ T7538] ? alloc_pipe_info+0xaf/0x360 [ 156.839612][ T7538] kmalloc_trace+0x2a/0xa0 [ 156.844617][ T7538] alloc_pipe_info+0xaf/0x360 [ 156.849386][ T7538] splice_direct_to_actor+0x636/0x690 [ 156.854861][ T7538] ? fsnotify_perm+0x58/0x3b0 [ 156.859535][ T7538] ? direct_file_splice_eof+0x70/0x70 [ 156.864935][ T7538] ? security_file_permission+0x5a/0x70 [ 156.870533][ T7538] do_splice_direct+0x10d/0x190 [ 156.875505][ T7538] ? do_splice_direct+0x190/0x190 [ 156.880615][ T7538] do_sendfile+0x3b6/0x9a0 [ 156.885172][ T7538] __x64_sys_sendfile64+0x110/0x150 [ 156.890369][ T7538] do_syscall_64+0x41/0xc0 [ 156.894880][ T7538] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.900806][ T7538] RIP: 0033:0x7fed2f90bae9 [ 156.905227][ T7538] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 156.924949][ T7538] RSP: 002b:00007fed2ec8e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.933484][ T7538] RAX: ffffffffffffffda RBX: 00007fed2fa2af80 RCX: 00007fed2f90bae9 [ 156.941548][ T7538] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 156.949518][ T7538] RBP: 00007fed2ec8e120 R08: 0000000000000000 R09: 0000000000000000 [ 156.958994][ T7538] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.967066][ T7538] R13: 000000000000000b R14: 00007fed2fa2af80 R15: 00007ffc6978db08 [ 156.975046][ T7538] [ 156.978063][ T7544] CPU: 1 PID: 7544 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 156.988866][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 156.998929][ T7544] Call Trace: [ 157.002275][ T7544] [ 157.005286][ T7544] dump_stack_lvl+0xda/0x130 [ 157.009905][ T7544] dump_stack+0x15/0x20 [ 157.014356][ T7544] should_fail_ex+0x21f/0x230 [ 157.019293][ T7544] ? copy_splice_read+0xc7/0x4b0 [ 157.024272][ T7544] __should_failslab+0x92/0xa0 [ 157.029419][ T7544] should_failslab+0x9/0x20 [ 157.033975][ T7544] slab_pre_alloc_hook+0x38/0x180 [ 157.039008][ T7544] ? copy_splice_read+0xc7/0x4b0 [ 157.043941][ T7544] ? copy_splice_read+0xc7/0x4b0 [ 157.048930][ T7544] __kmem_cache_alloc_node+0x48/0x1d0 [ 157.054338][ T7544] ? copy_splice_read+0xc7/0x4b0 [ 157.059280][ T7544] __kmalloc+0x95/0x1a0 [ 157.063437][ T7544] copy_splice_read+0xc7/0x4b0 [ 157.068223][ T7544] ? ext4_release_file+0x1c0/0x1c0 [ 157.073357][ T7544] splice_direct_to_actor+0x2aa/0x690 [ 157.078857][ T7544] ? direct_file_splice_eof+0x70/0x70 [ 157.084327][ T7544] ? security_file_permission+0x5a/0x70 [ 157.089877][ T7544] do_splice_direct+0x10d/0x190 [ 157.094793][ T7544] ? do_splice_direct+0x190/0x190 [ 157.099884][ T7544] do_sendfile+0x3b6/0x9a0 [ 157.104329][ T7544] __x64_sys_sendfile64+0x110/0x150 [ 157.109527][ T7544] do_syscall_64+0x41/0xc0 [ 157.114018][ T7544] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.120082][ T7544] RIP: 0033:0x7f6a4e1c7ae9 [ 157.124505][ T7544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 157.144362][ T7544] RSP: 002b:00007f6a4d5290c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.152777][ T7544] RAX: ffffffffffffffda RBX: 00007f6a4e2e7050 RCX: 00007f6a4e1c7ae9 [ 157.160746][ T7544] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 157.169477][ T7544] RBP: 00007f6a4d529120 R08: 0000000000000000 R09: 0000000000000000 [ 157.177460][ T7544] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.185484][ T7544] R13: 000000000000006e R14: 00007f6a4e2e7050 R15: 00007ffcf6974a68 [ 157.193504][ T7544] 07:32:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x2b}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600082f"], 0x42) 07:32:16 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x0) 07:32:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x2c}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:16 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r2, 0x0) 07:32:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x2e}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000832"], 0x42) 07:32:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x30}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:16 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 4) 07:32:16 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 2) 07:32:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x31}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:16 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r2, 0x0) 07:32:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x32}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000833"], 0x42) [ 157.665195][ T7576] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 157.673780][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.700095][ T7565] FAULT_INJECTION: forcing a failure. [ 157.700095][ T7565] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 157.715429][ T7565] CPU: 0 PID: 7565 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 157.725860][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 157.736160][ T7565] Call Trace: [ 157.739475][ T7565] [ 157.742863][ T7565] dump_stack_lvl+0xda/0x130 [ 157.747570][ T7565] dump_stack+0x15/0x20 [ 157.751969][ T7565] should_fail_ex+0x21f/0x230 [ 157.756664][ T7565] __should_fail_alloc_page+0xfd/0x110 [ 157.762345][ T7565] __alloc_pages_bulk+0x106/0x6b0 [ 157.767386][ T7565] ? __kmalloc+0x95/0x1a0 [ 157.771771][ T7565] copy_splice_read+0xfa/0x4b0 [ 157.776654][ T7565] ? ext4_release_file+0x1c0/0x1c0 [ 157.781786][ T7565] splice_direct_to_actor+0x2aa/0x690 [ 157.787246][ T7565] ? direct_file_splice_eof+0x70/0x70 [ 157.792922][ T7565] ? security_file_permission+0x5a/0x70 [ 157.798744][ T7565] do_splice_direct+0x10d/0x190 [ 157.803692][ T7565] ? do_splice_direct+0x190/0x190 [ 157.808885][ T7565] do_sendfile+0x3b6/0x9a0 [ 157.813416][ T7565] __x64_sys_sendfile64+0x110/0x150 [ 157.818632][ T7565] do_syscall_64+0x41/0xc0 [ 157.823048][ T7565] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.829505][ T7565] RIP: 0033:0x7f6a4e1c7ae9 [ 157.834001][ T7565] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 157.853738][ T7565] RSP: 002b:00007f6a4d54a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.862511][ T7565] RAX: ffffffffffffffda RBX: 00007f6a4e2e6f80 RCX: 00007f6a4e1c7ae9 [ 157.870486][ T7565] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 157.878627][ T7565] RBP: 00007f6a4d54a120 R08: 0000000000000000 R09: 0000000000000000 [ 157.886765][ T7565] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.894910][ T7565] R13: 000000000000000b R14: 00007f6a4e2e6f80 R15: 00007ffcf6974a68 [ 157.902891][ T7565] [ 157.923663][ T7572] FAULT_INJECTION: forcing a failure. [ 157.923663][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 157.936455][ T7572] CPU: 0 PID: 7572 Comm: syz-executor.2 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 157.946800][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 157.957020][ T7572] Call Trace: [ 157.960306][ T7572] [ 157.963388][ T7572] dump_stack_lvl+0xda/0x130 [ 157.968057][ T7572] dump_stack+0x15/0x20 [ 157.972220][ T7572] should_fail_ex+0x21f/0x230 [ 157.976901][ T7572] ? alloc_pipe_info+0x1ca/0x360 [ 157.981866][ T7572] __should_failslab+0x92/0xa0 [ 157.986736][ T7572] should_failslab+0x9/0x20 [ 157.991243][ T7572] slab_pre_alloc_hook+0x38/0x180 [ 157.996276][ T7572] ? alloc_pipe_info+0x1ca/0x360 [ 158.001214][ T7572] ? alloc_pipe_info+0x1ca/0x360 [ 158.006174][ T7572] __kmem_cache_alloc_node+0x48/0x1d0 [ 158.011582][ T7572] ? alloc_pipe_info+0x1ca/0x360 [ 158.016517][ T7572] __kmalloc+0x95/0x1a0 [ 158.020751][ T7572] ? kmalloc_trace+0x2a/0xa0 [ 158.025396][ T7572] alloc_pipe_info+0x1ca/0x360 [ 158.030214][ T7572] splice_direct_to_actor+0x636/0x690 [ 158.035594][ T7572] ? fsnotify_perm+0x58/0x3b0 [ 158.040381][ T7572] ? direct_file_splice_eof+0x70/0x70 [ 158.045839][ T7572] ? security_file_permission+0x5a/0x70 [ 158.051406][ T7572] do_splice_direct+0x10d/0x190 [ 158.056264][ T7572] ? do_splice_direct+0x190/0x190 [ 158.061555][ T7572] do_sendfile+0x3b6/0x9a0 [ 158.066123][ T7572] __x64_sys_sendfile64+0x110/0x150 [ 158.071335][ T7572] do_syscall_64+0x41/0xc0 [ 158.075745][ T7572] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 158.081746][ T7572] RIP: 0033:0x7fed2f90bae9 [ 158.086228][ T7572] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 158.105831][ T7572] RSP: 002b:00007fed2ec6d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 158.114387][ T7572] RAX: ffffffffffffffda RBX: 00007fed2fa2b050 RCX: 00007fed2f90bae9 [ 158.122351][ T7572] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 158.130411][ T7572] RBP: 00007fed2ec6d120 R08: 0000000000000000 R09: 0000000000000000 [ 158.138374][ T7572] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.146355][ T7572] R13: 000000000000006e R14: 00007fed2fa2b050 R15: 00007ffc6978db08 [ 158.154583][ T7572] 07:32:17 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x0) 07:32:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x34}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600083a"], 0x42) 07:32:17 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, 0xffffffffffffffff, 0x0) 07:32:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x35}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600083b"], 0x42) 07:32:17 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 5) 07:32:17 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 3) 07:32:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade600083c"], 0x42) 07:32:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x36}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x37}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:17 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, 0xffffffffffffffff, 0x0) [ 158.627001][ T7601] FAULT_INJECTION: forcing a failure. [ 158.627001][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 158.640446][ T7601] CPU: 1 PID: 7601 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 158.650819][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 158.661073][ T7601] Call Trace: [ 158.664356][ T7601] [ 158.667299][ T7601] dump_stack_lvl+0xda/0x130 [ 158.671993][ T7601] dump_stack+0x15/0x20 [ 158.676192][ T7601] should_fail_ex+0x21f/0x230 [ 158.680878][ T7601] ? __iomap_dio_rw+0x14e/0x1080 [ 158.685915][ T7601] __should_failslab+0x92/0xa0 [ 158.690802][ T7601] should_failslab+0x9/0x20 [ 158.695337][ T7601] slab_pre_alloc_hook+0x38/0x180 [ 158.700386][ T7601] ? __iomap_dio_rw+0x14e/0x1080 [ 158.705535][ T7601] __kmem_cache_alloc_node+0x48/0x1d0 [ 158.710933][ T7601] ? __iomap_dio_rw+0x14e/0x1080 [ 158.715981][ T7601] kmalloc_trace+0x2a/0xa0 [ 158.720512][ T7601] __iomap_dio_rw+0x14e/0x1080 [ 158.725374][ T7601] ? __rcu_read_unlock+0x4d/0x70 [ 158.730409][ T7601] ? avc_has_perm_noaudit+0x1c8/0x210 [ 158.735845][ T7601] iomap_dio_rw+0x40/0x90 [ 158.740291][ T7601] ext4_file_read_iter+0x21c/0x2a0 [ 158.745593][ T7601] copy_splice_read+0x26b/0x4b0 [ 158.750605][ T7601] ? ext4_release_file+0x1c0/0x1c0 [ 158.755769][ T7601] splice_direct_to_actor+0x2aa/0x690 [ 158.761536][ T7601] ? direct_file_splice_eof+0x70/0x70 [ 158.767154][ T7601] ? security_file_permission+0x5a/0x70 [ 158.772716][ T7601] do_splice_direct+0x10d/0x190 [ 158.777660][ T7601] ? do_splice_direct+0x190/0x190 [ 158.783062][ T7601] do_sendfile+0x3b6/0x9a0 [ 158.787492][ T7601] __x64_sys_sendfile64+0x110/0x150 [ 158.792851][ T7601] do_syscall_64+0x41/0xc0 [ 158.797289][ T7601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 158.803389][ T7601] RIP: 0033:0x7f6a4e1c7ae9 [ 158.807787][ T7601] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 158.827506][ T7601] RSP: 002b:00007f6a4d5290c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 158.835992][ T7601] RAX: ffffffffffffffda RBX: 00007f6a4e2e7050 RCX: 00007f6a4e1c7ae9 [ 158.844038][ T7601] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 158.852034][ T7601] RBP: 00007f6a4d529120 R08: 0000000000000000 R09: 0000000000000000 [ 158.860166][ T7601] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.868210][ T7601] R13: 000000000000006e R14: 00007f6a4e2e7050 R15: 00007ffcf6974a68 [ 158.876233][ T7601] [ 158.884021][ T7604] FAULT_INJECTION: forcing a failure. [ 158.884021][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 158.896730][ T7604] CPU: 1 PID: 7604 Comm: syz-executor.2 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 158.907138][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 158.917223][ T7604] Call Trace: [ 158.920498][ T7604] [ 158.923418][ T7604] dump_stack_lvl+0xda/0x130 [ 158.928022][ T7604] dump_stack+0x15/0x20 [ 158.932216][ T7604] should_fail_ex+0x21f/0x230 [ 158.936971][ T7604] ? copy_splice_read+0xc7/0x4b0 [ 158.942883][ T7604] __should_failslab+0x92/0xa0 [ 158.947844][ T7604] should_failslab+0x9/0x20 [ 158.952385][ T7604] slab_pre_alloc_hook+0x38/0x180 [ 158.957410][ T7604] ? copy_splice_read+0xc7/0x4b0 [ 158.962404][ T7604] ? copy_splice_read+0xc7/0x4b0 [ 158.967329][ T7604] __kmem_cache_alloc_node+0x48/0x1d0 [ 158.972901][ T7604] ? copy_splice_read+0xc7/0x4b0 [ 158.978010][ T7604] __kmalloc+0x95/0x1a0 [ 158.982152][ T7604] copy_splice_read+0xc7/0x4b0 [ 158.986981][ T7604] ? ext4_release_file+0x1c0/0x1c0 [ 158.992083][ T7604] splice_direct_to_actor+0x2aa/0x690 [ 158.997899][ T7604] ? direct_file_splice_eof+0x70/0x70 [ 159.003338][ T7604] ? security_file_permission+0x5a/0x70 [ 159.008955][ T7604] do_splice_direct+0x10d/0x190 [ 159.013795][ T7604] ? do_splice_direct+0x190/0x190 [ 159.018905][ T7604] do_sendfile+0x3b6/0x9a0 [ 159.023377][ T7604] __x64_sys_sendfile64+0x110/0x150 [ 159.028597][ T7604] do_syscall_64+0x41/0xc0 [ 159.033262][ T7604] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 159.039250][ T7604] RIP: 0033:0x7fed2f90bae9 [ 159.043775][ T7604] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 159.063396][ T7604] RSP: 002b:00007fed2ec6d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 159.071894][ T7604] RAX: ffffffffffffffda RBX: 00007fed2fa2b050 RCX: 00007fed2f90bae9 [ 159.079864][ T7604] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 159.087814][ T7604] RBP: 00007fed2ec6d120 R08: 0000000000000000 R09: 0000000000000000 [ 159.095774][ T7604] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.103745][ T7604] R13: 000000000000006e R14: 00007fed2fa2b050 R15: 00007ffc6978db08 [ 159.111724][ T7604] 07:32:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x38}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000873"], 0x42) 07:32:18 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, 0xffffffffffffffff, 0x0) 07:32:18 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x0) 07:32:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x39}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x3a}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:18 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 6) 07:32:18 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 4) 07:32:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000884"], 0x42) 07:32:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x3b}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x3d}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:18 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r2, 0x0) 07:32:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x3e}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x41}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000888"], 0x42) [ 159.616211][ T7623] FAULT_INJECTION: forcing a failure. [ 159.616211][ T7623] name failslab, interval 1, probability 0, space 0, times 0 [ 159.629106][ T7623] CPU: 0 PID: 7623 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 159.639532][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 159.649840][ T7623] Call Trace: [ 159.653216][ T7623] [ 159.656155][ T7623] dump_stack_lvl+0xda/0x130 [ 159.661202][ T7623] dump_stack+0x15/0x20 [ 159.665484][ T7623] should_fail_ex+0x21f/0x230 [ 159.670189][ T7623] __should_failslab+0x92/0xa0 [ 159.675149][ T7623] should_failslab+0x9/0x20 [ 159.679671][ T7623] slab_pre_alloc_hook+0x38/0x180 [ 159.684766][ T7623] kmem_cache_alloc+0x52/0x220 [ 159.689651][ T7623] ? ext4_init_io_end+0x31/0xb0 [ 159.694615][ T7623] ext4_init_io_end+0x31/0xb0 [ 159.699555][ T7623] ext4_do_writepages+0x6c5/0x2100 [ 159.704767][ T7623] ? next_uptodate_folio+0x672/0x6e0 [ 159.710167][ T7623] ? __rcu_read_unlock+0x33/0x70 [ 159.715173][ T7623] ? filemap_map_pages+0x6f2/0x730 [ 159.720739][ T7623] ext4_writepages+0x15e/0x2e0 [ 159.725547][ T7623] ? ext4_read_folio+0x1b0/0x1b0 [ 159.730659][ T7623] do_writepages+0x1c2/0x340 [ 159.735277][ T7623] ? memcg_list_lru_alloc+0xd5/0x750 [ 159.740597][ T7623] ? should_fail_ex+0x2d/0x230 [ 159.745378][ T7623] ? _raw_spin_unlock+0x26/0x40 [ 159.750279][ T7623] filemap_fdatawrite_wbc+0xdb/0xf0 [ 159.755566][ T7623] filemap_write_and_wait_range+0xe0/0x210 [ 159.761429][ T7623] kiocb_write_and_wait+0x79/0x110 [ 159.766572][ T7623] __iomap_dio_rw+0x512/0x1080 [ 159.771512][ T7623] ? __rcu_read_unlock+0x4d/0x70 [ 159.776470][ T7623] ? avc_has_perm_noaudit+0x1c8/0x210 [ 159.781907][ T7623] iomap_dio_rw+0x40/0x90 [ 159.786296][ T7623] ext4_file_read_iter+0x21c/0x2a0 [ 159.791420][ T7623] copy_splice_read+0x26b/0x4b0 [ 159.796371][ T7623] ? ext4_release_file+0x1c0/0x1c0 [ 159.801560][ T7623] splice_direct_to_actor+0x2aa/0x690 [ 159.807160][ T7623] ? direct_file_splice_eof+0x70/0x70 [ 159.812575][ T7623] ? security_file_permission+0x5a/0x70 [ 159.818167][ T7623] do_splice_direct+0x10d/0x190 [ 159.823183][ T7623] ? do_splice_direct+0x190/0x190 [ 159.828216][ T7623] do_sendfile+0x3b6/0x9a0 [ 159.833363][ T7623] __x64_sys_sendfile64+0x110/0x150 [ 159.838561][ T7623] do_syscall_64+0x41/0xc0 [ 159.842973][ T7623] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 159.848930][ T7623] RIP: 0033:0x7f6a4e1c7ae9 [ 159.853344][ T7623] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 159.873120][ T7623] RSP: 002b:00007f6a4d54a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 159.881539][ T7623] RAX: ffffffffffffffda RBX: 00007f6a4e2e6f80 RCX: 00007f6a4e1c7ae9 [ 159.890339][ T7623] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 159.898539][ T7623] RBP: 00007f6a4d54a120 R08: 0000000000000000 R09: 0000000000000000 [ 159.906511][ T7623] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.914562][ T7623] R13: 000000000000000b R14: 00007f6a4e2e6f80 R15: 00007ffcf6974a68 [ 159.922629][ T7623] [ 159.939880][ T7629] FAULT_INJECTION: forcing a failure. [ 159.939880][ T7629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.953333][ T7629] CPU: 1 PID: 7629 Comm: syz-executor.2 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 159.963765][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 159.973882][ T7629] Call Trace: [ 159.977148][ T7629] [ 159.980596][ T7629] dump_stack_lvl+0xda/0x130 [ 159.985193][ T7629] dump_stack+0x15/0x20 [ 159.989417][ T7629] should_fail_ex+0x21f/0x230 [ 159.994163][ T7629] __should_fail_alloc_page+0xfd/0x110 [ 159.999976][ T7629] __alloc_pages_bulk+0x106/0x6b0 [ 160.005005][ T7629] ? __kmalloc+0x95/0x1a0 [ 160.009341][ T7629] copy_splice_read+0xfa/0x4b0 [ 160.014325][ T7629] ? ext4_release_file+0x1c0/0x1c0 [ 160.019424][ T7629] splice_direct_to_actor+0x2aa/0x690 [ 160.024899][ T7629] ? direct_file_splice_eof+0x70/0x70 [ 160.030332][ T7629] ? security_file_permission+0x5a/0x70 [ 160.035967][ T7629] do_splice_direct+0x10d/0x190 [ 160.040867][ T7629] ? do_splice_direct+0x190/0x190 [ 160.046116][ T7629] do_sendfile+0x3b6/0x9a0 [ 160.050561][ T7629] __x64_sys_sendfile64+0x110/0x150 [ 160.055911][ T7629] do_syscall_64+0x41/0xc0 [ 160.060410][ T7629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.066588][ T7629] RIP: 0033:0x7fed2f90bae9 [ 160.071063][ T7629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 160.090802][ T7629] RSP: 002b:00007fed2ec8e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 160.099861][ T7629] RAX: ffffffffffffffda RBX: 00007fed2fa2af80 RCX: 00007fed2f90bae9 [ 160.108009][ T7629] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 160.116362][ T7629] RBP: 00007fed2ec8e120 R08: 0000000000000000 R09: 0000000000000000 [ 160.124353][ T7629] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.132402][ T7629] R13: 000000000000000b R14: 00007fed2fa2af80 R15: 00007ffc6978db08 [ 160.140807][ T7629] 07:32:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x43}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000889"], 0x42) 07:32:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000888"], 0x42) 07:32:19 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:19 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 5) 07:32:19 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 1) 07:32:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x44}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000888"], 0x42) 07:32:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x4) 07:32:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x45}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000888"], 0x42) 07:32:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x49}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0xfdef) 07:32:19 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) (fail_nth: 1) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x4a}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 160.570866][ T7669] FAULT_INJECTION: forcing a failure. [ 160.570866][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 160.583823][ T7669] CPU: 0 PID: 7669 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 160.594333][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 160.604498][ T7669] Call Trace: [ 160.607789][ T7669] [ 160.610729][ T7669] dump_stack_lvl+0xda/0x130 [ 160.615360][ T7669] dump_stack+0x15/0x20 [ 160.619543][ T7669] should_fail_ex+0x21f/0x230 [ 160.624249][ T7669] ? alloc_pipe_info+0xaf/0x360 [ 160.629220][ T7669] __should_failslab+0x92/0xa0 [ 160.634216][ T7669] should_failslab+0x9/0x20 [ 160.638838][ T7669] slab_pre_alloc_hook+0x38/0x180 [ 160.643949][ T7669] ? alloc_pipe_info+0xaf/0x360 [ 160.649019][ T7669] __kmem_cache_alloc_node+0x48/0x1d0 [ 160.654435][ T7669] ? alloc_pipe_info+0xaf/0x360 [ 160.659479][ T7669] kmalloc_trace+0x2a/0xa0 [ 160.663947][ T7669] alloc_pipe_info+0xaf/0x360 [ 160.668754][ T7669] splice_direct_to_actor+0x636/0x690 [ 160.674194][ T7669] ? fsnotify_perm+0x58/0x3b0 [ 160.678931][ T7669] ? direct_file_splice_eof+0x70/0x70 [ 160.684437][ T7669] ? security_file_permission+0x5a/0x70 [ 160.690033][ T7669] do_splice_direct+0x10d/0x190 [ 160.694889][ T7669] ? do_splice_direct+0x190/0x190 [ 160.699912][ T7669] do_sendfile+0x3b6/0x9a0 [ 160.704342][ T7669] __x64_sys_sendfile64+0x110/0x150 [ 160.709604][ T7669] do_syscall_64+0x41/0xc0 [ 160.714187][ T7669] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.720198][ T7669] RIP: 0033:0x7ff1824fdae9 [ 160.724608][ T7669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 160.744537][ T7669] RSP: 002b:00007ff18185f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 160.753207][ T7669] RAX: ffffffffffffffda RBX: 00007ff18261d050 RCX: 00007ff1824fdae9 [ 160.761243][ T7669] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 160.769297][ T7669] RBP: 00007ff18185f120 R08: 0000000000000000 R09: 0000000000000000 [ 160.777377][ T7669] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.785469][ T7669] R13: 000000000000006e R14: 00007ff18261d050 R15: 00007ffc27769878 [ 160.793555][ T7669] [ 160.799095][ T7671] FAULT_INJECTION: forcing a failure. [ 160.799095][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 160.811851][ T7671] CPU: 0 PID: 7671 Comm: syz-executor.2 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 160.822515][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 160.833219][ T7671] Call Trace: [ 160.836592][ T7671] [ 160.839549][ T7671] dump_stack_lvl+0xda/0x130 [ 160.844148][ T7671] dump_stack+0x15/0x20 [ 160.848312][ T7671] should_fail_ex+0x21f/0x230 [ 160.852990][ T7671] ? __iomap_dio_rw+0x14e/0x1080 [ 160.858030][ T7671] __should_failslab+0x92/0xa0 [ 160.862810][ T7671] should_failslab+0x9/0x20 [ 160.867372][ T7671] slab_pre_alloc_hook+0x38/0x180 [ 160.872560][ T7671] ? __iomap_dio_rw+0x14e/0x1080 [ 160.877508][ T7671] __kmem_cache_alloc_node+0x48/0x1d0 [ 160.883145][ T7671] ? __iomap_dio_rw+0x14e/0x1080 [ 160.888237][ T7671] kmalloc_trace+0x2a/0xa0 [ 160.892661][ T7671] __iomap_dio_rw+0x14e/0x1080 [ 160.897463][ T7671] ? __rcu_read_unlock+0x4d/0x70 [ 160.902483][ T7671] ? avc_has_perm_noaudit+0x1c8/0x210 [ 160.907870][ T7671] iomap_dio_rw+0x40/0x90 [ 160.912210][ T7671] ext4_file_read_iter+0x21c/0x2a0 [ 160.917415][ T7671] copy_splice_read+0x26b/0x4b0 [ 160.922272][ T7671] ? ext4_release_file+0x1c0/0x1c0 [ 160.927469][ T7671] splice_direct_to_actor+0x2aa/0x690 [ 160.932843][ T7671] ? direct_file_splice_eof+0x70/0x70 [ 160.938250][ T7671] ? security_file_permission+0x5a/0x70 [ 160.943891][ T7671] do_splice_direct+0x10d/0x190 [ 160.948930][ T7671] ? do_splice_direct+0x190/0x190 [ 160.953958][ T7671] do_sendfile+0x3b6/0x9a0 [ 160.958391][ T7671] __x64_sys_sendfile64+0x110/0x150 [ 160.963603][ T7671] do_syscall_64+0x41/0xc0 [ 160.968195][ T7671] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.974324][ T7671] RIP: 0033:0x7fed2f90bae9 [ 160.978736][ T7671] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 160.998446][ T7671] RSP: 002b:00007fed2ec6d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 161.006930][ T7671] RAX: ffffffffffffffda RBX: 00007fed2fa2b050 RCX: 00007fed2f90bae9 [ 161.014906][ T7671] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 161.022960][ T7671] RBP: 00007fed2ec6d120 R08: 0000000000000000 R09: 0000000000000000 [ 161.031138][ T7671] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.039344][ T7671] R13: 000000000000006e R14: 00007fed2fa2b050 R15: 00007ffc6978db08 [ 161.047334][ T7671] 07:32:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x4b}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:20 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 6) 07:32:20 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0xfffffdef) 07:32:20 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x100100000) 07:32:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x4c}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:20 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 2) 07:32:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x4f}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x51}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x52}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0xfffffffffffffdef) 07:32:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x53}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x54}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 161.535027][ T7702] FAULT_INJECTION: forcing a failure. [ 161.535027][ T7702] name failslab, interval 1, probability 0, space 0, times 0 [ 161.540670][ T7704] FAULT_INJECTION: forcing a failure. [ 161.540670][ T7704] name failslab, interval 1, probability 0, space 0, times 0 [ 161.547963][ T7702] CPU: 0 PID: 7702 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 161.571824][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 161.581996][ T7702] Call Trace: [ 161.585439][ T7702] [ 161.588395][ T7702] dump_stack_lvl+0xda/0x130 [ 161.593289][ T7702] dump_stack+0x15/0x20 [ 161.597472][ T7702] should_fail_ex+0x21f/0x230 [ 161.602334][ T7702] ? alloc_pipe_info+0x1ca/0x360 [ 161.607297][ T7702] __should_failslab+0x92/0xa0 [ 161.612186][ T7702] should_failslab+0x9/0x20 [ 161.616798][ T7702] slab_pre_alloc_hook+0x38/0x180 [ 161.621897][ T7702] ? alloc_pipe_info+0x1ca/0x360 [ 161.626847][ T7702] ? alloc_pipe_info+0x1ca/0x360 [ 161.631867][ T7702] __kmem_cache_alloc_node+0x48/0x1d0 [ 161.637365][ T7702] ? alloc_pipe_info+0x1ca/0x360 [ 161.642320][ T7702] __kmalloc+0x95/0x1a0 [ 161.646496][ T7702] ? kmalloc_trace+0x2a/0xa0 [ 161.651091][ T7702] alloc_pipe_info+0x1ca/0x360 [ 161.655907][ T7702] splice_direct_to_actor+0x636/0x690 [ 161.661287][ T7702] ? fsnotify_perm+0x58/0x3b0 [ 161.666033][ T7702] ? direct_file_splice_eof+0x70/0x70 [ 161.672258][ T7702] ? security_file_permission+0x5a/0x70 [ 161.677952][ T7702] do_splice_direct+0x10d/0x190 [ 161.683245][ T7702] ? do_splice_direct+0x190/0x190 [ 161.688329][ T7702] do_sendfile+0x3b6/0x9a0 [ 161.693090][ T7702] __x64_sys_sendfile64+0x110/0x150 [ 161.699000][ T7702] do_syscall_64+0x41/0xc0 [ 161.703520][ T7702] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 161.709504][ T7702] RIP: 0033:0x7ff1824fdae9 [ 161.713933][ T7702] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 161.733980][ T7702] RSP: 002b:00007ff18185f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 161.742500][ T7702] RAX: ffffffffffffffda RBX: 00007ff18261d050 RCX: 00007ff1824fdae9 [ 161.750624][ T7702] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 161.758694][ T7702] RBP: 00007ff18185f120 R08: 0000000000000000 R09: 0000000000000000 [ 161.766852][ T7702] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.774852][ T7702] R13: 000000000000006e R14: 00007ff18261d050 R15: 00007ffc27769878 [ 161.782825][ T7702] [ 161.785843][ T7704] CPU: 1 PID: 7704 Comm: syz-executor.2 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 161.796184][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 161.806256][ T7704] Call Trace: [ 161.809534][ T7704] [ 161.812494][ T7704] dump_stack_lvl+0xda/0x130 [ 161.817082][ T7704] dump_stack+0x15/0x20 [ 161.821402][ T7704] should_fail_ex+0x21f/0x230 [ 161.826077][ T7704] __should_failslab+0x92/0xa0 [ 161.830916][ T7704] should_failslab+0x9/0x20 [ 161.835440][ T7704] slab_pre_alloc_hook+0x38/0x180 [ 161.840576][ T7704] kmem_cache_alloc+0x52/0x220 [ 161.845330][ T7704] ? ext4_init_io_end+0x31/0xb0 [ 161.850203][ T7704] ext4_init_io_end+0x31/0xb0 [ 161.855059][ T7704] ext4_do_writepages+0x6c5/0x2100 [ 161.860298][ T7704] ? mas_update_gap+0x18e/0x630 [ 161.865151][ T7704] ? mas_wr_modify+0x2899/0x37d0 [ 161.870341][ T7704] ? cgroup_rstat_updated+0x8c/0x1c0 [ 161.875790][ T7704] ext4_writepages+0x15e/0x2e0 [ 161.880839][ T7704] ? ext4_read_folio+0x1b0/0x1b0 [ 161.885857][ T7704] do_writepages+0x1c2/0x340 [ 161.890496][ T7704] ? memcg_list_lru_alloc+0xd5/0x750 [ 161.895988][ T7704] ? should_fail_ex+0x2d/0x230 [ 161.900779][ T7704] ? _raw_spin_unlock+0x26/0x40 [ 161.905660][ T7704] filemap_fdatawrite_wbc+0xdb/0xf0 [ 161.910886][ T7704] filemap_write_and_wait_range+0xe0/0x210 [ 161.916753][ T7704] kiocb_write_and_wait+0x79/0x110 [ 161.921933][ T7704] __iomap_dio_rw+0x512/0x1080 [ 161.926788][ T7704] ? __rcu_read_unlock+0x4d/0x70 [ 161.931767][ T7704] ? avc_has_perm_noaudit+0x1c8/0x210 [ 161.937300][ T7704] iomap_dio_rw+0x40/0x90 [ 161.941724][ T7704] ext4_file_read_iter+0x21c/0x2a0 [ 161.946846][ T7704] copy_splice_read+0x26b/0x4b0 [ 161.951703][ T7704] ? ext4_release_file+0x1c0/0x1c0 [ 161.956821][ T7704] splice_direct_to_actor+0x2aa/0x690 [ 161.962249][ T7704] ? direct_file_splice_eof+0x70/0x70 [ 161.967658][ T7704] ? security_file_permission+0x5a/0x70 [ 161.973268][ T7704] do_splice_direct+0x10d/0x190 [ 161.978282][ T7704] ? do_splice_direct+0x190/0x190 [ 161.983484][ T7704] do_sendfile+0x3b6/0x9a0 [ 161.988049][ T7704] __x64_sys_sendfile64+0x110/0x150 [ 161.993388][ T7704] do_syscall_64+0x41/0xc0 [ 161.997819][ T7704] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 162.003922][ T7704] RIP: 0033:0x7fed2f90bae9 [ 162.008327][ T7704] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 162.028465][ T7704] RSP: 002b:00007fed2ec6d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 162.037160][ T7704] RAX: ffffffffffffffda RBX: 00007fed2fa2b050 RCX: 00007fed2f90bae9 [ 162.045138][ T7704] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 162.053190][ T7704] RBP: 00007fed2ec6d120 R08: 0000000000000000 R09: 0000000000000000 [ 162.061158][ T7704] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.069243][ T7704] R13: 000000000000006e R14: 00007fed2fa2b050 R15: 00007ffc6978db08 [ 162.077270][ T7704] 07:32:21 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x55}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:21 executing program 5: r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)="580b90163def946eb9539bc534fa1ae14504d3e6a0dda1b8123fb70dedbb8b4e181bf4b314893dba74a493efae78d541843061bf99ff826416764d325b54e677597ba571", 0x44, 0x0) keyctl$get_keyring_id(0x0, r0, 0x9549) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) keyctl$instantiate(0xc, r0, &(0x7f0000000080)=@encrypted_update={'update ', 'default', 0x20, 'trusted:'}, 0x18, 0xfffffffffffffffd) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x6, r3, 0xfffffffffffffff8, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x6, r4, 0xfffffffffffffff8, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r0, 0x1) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x88f8}, @val={0x3, 0x1, 0x2, 0x0, 0x2, 0x9}, @mpls={[{0xff}, {0x8, 0x0, 0x1}], @generic="85aee0cfaf47b3f1e5f3b78d8ae8d151542274f3b04fce420bc11f02cd2e5e597cf5c09c301aea4b"}}, 0x3e) 07:32:21 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x101000000) 07:32:21 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x57}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:21 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 3) 07:32:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x59}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x5a}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x5c}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 162.430329][ T27] audit: type=1400 audit(1695627141.515:313): avc: denied { write } for pid=7721 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 07:32:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x5d}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:21 executing program 5: r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)="580b90163def946eb9539bc534fa1ae14504d3e6a0dda1b8123fb70dedbb8b4e181bf4b314893dba74a493efae78d541843061bf99ff826416764d325b54e677597ba571", 0x44, 0x0) keyctl$get_keyring_id(0x0, r0, 0x9549) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) keyctl$instantiate(0xc, r0, &(0x7f0000000080)=@encrypted_update={'update ', 'default', 0x20, 'trusted:'}, 0x18, 0xfffffffffffffffd) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x6, r3, 0xfffffffffffffff8, 0x0, 0x0) (async, rerun: 64) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) (rerun: 64) keyctl$KEYCTL_MOVE(0x6, r4, 0xfffffffffffffff8, 0x0, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r0, 0x1) (async) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x88f8}, @val={0x3, 0x1, 0x2, 0x0, 0x2, 0x9}, @mpls={[{0xff}, {0x8, 0x0, 0x1}], @generic="85aee0cfaf47b3f1e5f3b78d8ae8d151542274f3b04fce420bc11f02cd2e5e597cf5c09c301aea4b"}}, 0x3e) [ 162.520469][ T7725] FAULT_INJECTION: forcing a failure. [ 162.520469][ T7725] name failslab, interval 1, probability 0, space 0, times 0 [ 162.533395][ T7725] CPU: 1 PID: 7725 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 162.543931][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 162.554429][ T7725] Call Trace: [ 162.557889][ T7725] [ 162.560928][ T7725] dump_stack_lvl+0xda/0x130 [ 162.565772][ T7725] dump_stack+0x15/0x20 [ 162.570035][ T7725] should_fail_ex+0x21f/0x230 [ 162.574725][ T7725] ? copy_splice_read+0xc7/0x4b0 [ 162.579906][ T7725] __should_failslab+0x92/0xa0 [ 162.584678][ T7725] should_failslab+0x9/0x20 [ 162.589335][ T7725] slab_pre_alloc_hook+0x38/0x180 [ 162.594468][ T7725] ? copy_splice_read+0xc7/0x4b0 [ 162.599791][ T7725] ? copy_splice_read+0xc7/0x4b0 [ 162.605146][ T7725] __kmem_cache_alloc_node+0x48/0x1d0 [ 162.610954][ T7725] ? copy_splice_read+0xc7/0x4b0 [ 162.615918][ T7725] __kmalloc+0x95/0x1a0 [ 162.620075][ T7725] copy_splice_read+0xc7/0x4b0 [ 162.624934][ T7725] ? ext4_release_file+0x1c0/0x1c0 [ 162.630130][ T7725] splice_direct_to_actor+0x2aa/0x690 [ 162.636056][ T7725] ? direct_file_splice_eof+0x70/0x70 [ 162.641466][ T7725] ? security_file_permission+0x5a/0x70 [ 162.647627][ T7725] do_splice_direct+0x10d/0x190 [ 162.652590][ T7725] ? do_splice_direct+0x190/0x190 [ 162.657703][ T7725] do_sendfile+0x3b6/0x9a0 [ 162.662151][ T7725] __x64_sys_sendfile64+0x110/0x150 [ 162.667365][ T7725] do_syscall_64+0x41/0xc0 [ 162.671807][ T7725] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 162.677761][ T7725] RIP: 0033:0x7ff1824fdae9 [ 162.682165][ T7725] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 162.702170][ T7725] RSP: 002b:00007ff1818800c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 162.710669][ T7725] RAX: ffffffffffffffda RBX: 00007ff18261cf80 RCX: 00007ff1824fdae9 [ 162.719288][ T7725] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 162.727453][ T7725] RBP: 00007ff181880120 R08: 0000000000000000 R09: 0000000000000000 [ 162.735446][ T7725] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.743706][ T7725] R13: 000000000000000b R14: 00007ff18261cf80 R15: 00007ffc27769878 [ 162.752243][ T7725] 07:32:22 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x100002000) 07:32:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x5e}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:22 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:22 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x102000000) 07:32:22 executing program 5: r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)="580b90163def946eb9539bc534fa1ae14504d3e6a0dda1b8123fb70dedbb8b4e181bf4b314893dba74a493efae78d541843061bf99ff826416764d325b54e677597ba571", 0x44, 0x0) keyctl$get_keyring_id(0x0, r0, 0x9549) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) keyctl$instantiate(0xc, r0, &(0x7f0000000080)=@encrypted_update={'update ', 'default', 0x20, 'trusted:'}, 0x18, 0xfffffffffffffffd) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (async) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x6, r3, 0xfffffffffffffff8, 0x0, 0x0) (async) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x6, r4, 0xfffffffffffffff8, 0x0, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r0, 0x1) (async) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x88f8}, @val={0x3, 0x1, 0x2, 0x0, 0x2, 0x9}, @mpls={[{0xff}, {0x8, 0x0, 0x1}], @generic="85aee0cfaf47b3f1e5f3b78d8ae8d151542274f3b04fce420bc11f02cd2e5e597cf5c09c301aea4b"}}, 0x3e) 07:32:22 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 4) 07:32:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x5f}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x60}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'pim6reg0\x00'}) r2 = socket$kcm(0x29, 0x2, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000)='-7', 0x2}]) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@multicast]}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00', 0x10}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @remote}) 07:32:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x62}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x63}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 163.325639][ T7768] FAULT_INJECTION: forcing a failure. [ 163.325639][ T7768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.338955][ T7768] CPU: 1 PID: 7768 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 163.339037][ T27] audit: type=1400 audit(1695627142.415:314): avc: denied { ioctl } for pid=7774 comm="syz-executor.5" path="socket:[17121]" dev="sockfs" ino=17121 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 07:32:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x64}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 163.349335][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 163.349353][ T7768] Call Trace: [ 163.349360][ T7768] [ 163.349367][ T7768] dump_stack_lvl+0xda/0x130 [ 163.395178][ T7768] dump_stack+0x15/0x20 [ 163.399349][ T7768] should_fail_ex+0x21f/0x230 [ 163.404115][ T7768] __should_fail_alloc_page+0xfd/0x110 [ 163.409606][ T7768] __alloc_pages_bulk+0x106/0x6b0 [ 163.414682][ T7768] ? __kmalloc+0x95/0x1a0 [ 163.419046][ T7768] copy_splice_read+0xfa/0x4b0 [ 163.423804][ T7768] ? ext4_release_file+0x1c0/0x1c0 [ 163.428899][ T7768] splice_direct_to_actor+0x2aa/0x690 [ 163.434777][ T7768] ? direct_file_splice_eof+0x70/0x70 [ 163.440177][ T7768] ? security_file_permission+0x5a/0x70 [ 163.445955][ T7768] do_splice_direct+0x10d/0x190 [ 163.450817][ T7768] ? do_splice_direct+0x190/0x190 [ 163.456014][ T7768] do_sendfile+0x3b6/0x9a0 [ 163.460583][ T7768] __x64_sys_sendfile64+0x110/0x150 [ 163.465837][ T7768] do_syscall_64+0x41/0xc0 [ 163.470257][ T7768] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 163.476183][ T7768] RIP: 0033:0x7ff1824fdae9 [ 163.480596][ T7768] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 163.500382][ T7768] RSP: 002b:00007ff18185f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 163.508811][ T7768] RAX: ffffffffffffffda RBX: 00007ff18261d050 RCX: 00007ff1824fdae9 [ 163.516775][ T7768] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 163.524732][ T7768] RBP: 00007ff18185f120 R08: 0000000000000000 R09: 0000000000000000 [ 163.532783][ T7768] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.540808][ T7768] R13: 000000000000006e R14: 00007ff18261d050 R15: 00007ffc27769878 [ 163.548877][ T7768] [ 163.559189][ T7776] veth1_to_hsr: entered allmulticast mode 07:32:23 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x101000000) 07:32:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x65}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:23 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:23 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x103000000) 07:32:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'pim6reg0\x00'}) r2 = socket$kcm(0x29, 0x2, 0x0) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000)='-7', 0x2}]) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@multicast]}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00', 0x10}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @remote}) 07:32:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x66}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:23 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 5) 07:32:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'pim6reg0\x00'}) (async) r2 = socket$kcm(0x29, 0x2, 0x0) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000)='-7', 0x2}]) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@multicast]}) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00', 0x10}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @remote}) 07:32:23 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x6b}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x1000}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) 07:32:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x6c}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 164.173759][ T7809] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 164.182128][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.287693][ T7810] FAULT_INJECTION: forcing a failure. [ 164.287693][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 164.300635][ T7810] CPU: 0 PID: 7810 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 164.311247][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 164.321413][ T7810] Call Trace: [ 164.324716][ T7810] [ 164.327649][ T7810] dump_stack_lvl+0xda/0x130 [ 164.332670][ T7810] dump_stack+0x15/0x20 [ 164.336839][ T7810] should_fail_ex+0x21f/0x230 [ 164.341611][ T7810] ? __iomap_dio_rw+0x14e/0x1080 [ 164.346817][ T7810] __should_failslab+0x92/0xa0 [ 164.351583][ T7810] should_failslab+0x9/0x20 [ 164.356082][ T7810] slab_pre_alloc_hook+0x38/0x180 [ 164.361107][ T7810] ? __iomap_dio_rw+0x14e/0x1080 [ 164.366101][ T7810] __kmem_cache_alloc_node+0x48/0x1d0 [ 164.371496][ T7810] ? __iomap_dio_rw+0x14e/0x1080 [ 164.376517][ T7810] kmalloc_trace+0x2a/0xa0 [ 164.380932][ T7810] __iomap_dio_rw+0x14e/0x1080 [ 164.385889][ T7810] ? __rcu_read_unlock+0x4d/0x70 [ 164.390821][ T7810] ? avc_has_perm_noaudit+0x1c8/0x210 [ 164.396219][ T7810] iomap_dio_rw+0x40/0x90 [ 164.400557][ T7810] ext4_file_read_iter+0x21c/0x2a0 [ 164.405669][ T7810] copy_splice_read+0x26b/0x4b0 [ 164.410556][ T7810] ? ext4_release_file+0x1c0/0x1c0 [ 164.415751][ T7810] splice_direct_to_actor+0x2aa/0x690 [ 164.421156][ T7810] ? direct_file_splice_eof+0x70/0x70 [ 164.426533][ T7810] ? security_file_permission+0x5a/0x70 [ 164.432564][ T7810] do_splice_direct+0x10d/0x190 [ 164.437661][ T7810] ? do_splice_direct+0x190/0x190 [ 164.442771][ T7810] do_sendfile+0x3b6/0x9a0 [ 164.447275][ T7810] __x64_sys_sendfile64+0x110/0x150 [ 164.452873][ T7810] do_syscall_64+0x41/0xc0 [ 164.457372][ T7810] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 164.463706][ T7810] RIP: 0033:0x7ff1824fdae9 [ 164.468187][ T7810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 164.487827][ T7810] RSP: 002b:00007ff18185f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 164.496314][ T7810] RAX: ffffffffffffffda RBX: 00007ff18261d050 RCX: 00007ff1824fdae9 [ 164.504338][ T7810] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 164.512400][ T7810] RBP: 00007ff18185f120 R08: 0000000000000000 R09: 0000000000000000 [ 164.520490][ T7810] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.528493][ T7810] R13: 000000000000006e R14: 00007ff18261d050 R15: 00007ffc27769878 [ 164.536469][ T7810] 07:32:23 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x102000000) 07:32:23 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xe) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x1000}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) 07:32:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x6d}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:23 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x104000000) 07:32:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x72}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:24 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) (fail_nth: 6) 07:32:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x73}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x1000}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (async, rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) (rerun: 32) 07:32:24 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x7, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x74}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x75}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 165.214265][ T7847] FAULT_INJECTION: forcing a failure. [ 165.214265][ T7847] name failslab, interval 1, probability 0, space 0, times 0 [ 165.227139][ T7847] CPU: 1 PID: 7847 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 165.237502][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 165.247667][ T7847] Call Trace: [ 165.250971][ T7847] [ 165.253891][ T7847] dump_stack_lvl+0xda/0x130 [ 165.258512][ T7847] dump_stack+0x15/0x20 [ 165.262654][ T7847] should_fail_ex+0x21f/0x230 [ 165.267734][ T7847] __should_failslab+0x92/0xa0 [ 165.272759][ T7847] should_failslab+0x9/0x20 [ 165.277274][ T7847] slab_pre_alloc_hook+0x38/0x180 [ 165.282495][ T7847] kmem_cache_alloc+0x52/0x220 [ 165.287295][ T7847] ? ext4_init_io_end+0x31/0xb0 [ 165.292224][ T7847] ext4_init_io_end+0x31/0xb0 [ 165.297020][ T7847] ext4_do_writepages+0x6c5/0x2100 [ 165.302151][ T7847] ? mas_update_gap+0x18e/0x630 [ 165.307017][ T7847] ? mas_wr_modify+0x2899/0x37d0 [ 165.312154][ T7847] ? cgroup_rstat_updated+0x8c/0x1c0 [ 165.317678][ T7847] ext4_writepages+0x15e/0x2e0 [ 165.322460][ T7847] ? ext4_read_folio+0x1b0/0x1b0 [ 165.327405][ T7847] do_writepages+0x1c2/0x340 [ 165.332060][ T7847] ? memcg_list_lru_alloc+0xd5/0x750 [ 165.337966][ T7847] ? should_fail_ex+0x2d/0x230 [ 165.342801][ T7847] ? _raw_spin_unlock+0x26/0x40 [ 165.347717][ T7847] filemap_fdatawrite_wbc+0xdb/0xf0 [ 165.353003][ T7847] filemap_write_and_wait_range+0xe0/0x210 [ 165.358910][ T7847] kiocb_write_and_wait+0x79/0x110 [ 165.364287][ T7847] __iomap_dio_rw+0x512/0x1080 [ 165.369145][ T7847] ? __rcu_read_unlock+0x4d/0x70 [ 165.374443][ T7847] ? avc_has_perm_noaudit+0x1c8/0x210 [ 165.380044][ T7847] iomap_dio_rw+0x40/0x90 [ 165.384533][ T7847] ext4_file_read_iter+0x21c/0x2a0 [ 165.389857][ T7847] copy_splice_read+0x26b/0x4b0 [ 165.394730][ T7847] ? ext4_release_file+0x1c0/0x1c0 [ 165.399848][ T7847] splice_direct_to_actor+0x2aa/0x690 [ 165.405346][ T7847] ? direct_file_splice_eof+0x70/0x70 [ 165.410895][ T7847] ? security_file_permission+0x5a/0x70 [ 165.416483][ T7847] do_splice_direct+0x10d/0x190 [ 165.421415][ T7847] ? do_splice_direct+0x190/0x190 [ 165.426608][ T7847] do_sendfile+0x3b6/0x9a0 [ 165.431172][ T7847] __x64_sys_sendfile64+0x110/0x150 [ 165.437024][ T7847] do_syscall_64+0x41/0xc0 [ 165.441647][ T7847] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.447931][ T7847] RIP: 0033:0x7ff1824fdae9 [ 165.452444][ T7847] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 165.472479][ T7847] RSP: 002b:00007ff18185f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 165.480910][ T7847] RAX: ffffffffffffffda RBX: 00007ff18261d050 RCX: 00007ff1824fdae9 [ 165.488872][ T7847] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 165.496880][ T7847] RBP: 00007ff18185f120 R08: 0000000000000000 R09: 0000000000000000 [ 165.504948][ T7847] R10: 0000000108000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.513107][ T7847] R13: 000000000000006e R14: 00007ff18261d050 R15: 00007ffc27769878 [ 165.521173][ T7847] 07:32:24 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x103000000) 07:32:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x76}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="191ccc3efba63984c9ffffffffff0009000000ad"], 0x42) io_setup(0x3, &(0x7f00000004c0)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x88e5}, @void, @llc={@snap={0x1, 0x3, "90", ':tc', 0x890d, "9f20e50ed4482ad8bcb52b71ded27fd22040228cc4125f1be445aaf1e019aa601f5379181b136f1057d98d7ae2606960576ba5049c47737fd30908d4ca486f0f8b549e4a42cb8a920025f674466e43ab59728edab1b78e0ad12d2e4c6d3b834fdaeb17054d8f8227814ef9722f67aa5cb3fd5163023af0b5f4a4cbecb3561b913ff928a0a10bbe42f562dac176e236bad1ef2a227ee2d7cb395f9b08fd89f7e60139e9e8b92149b5c81ba374eb9c8294552d9a54db376273bde13e03e1fd333b582bcf8d3946d48f602d97d88bdb4523e0118f761a9400a4abdbf2191aafe6d5381f367b0f4efad1f7f308f3a36d0d412c40dda1f651f2463b4d0ef85c4d977a7dd0793c37ce71625c3ab538c85a4f2580bcacb494967710772d40fc8e43687ac03323c152cd6fb46b020499f8d5d0a7a95b26b151e8df05accdb3523f6a893fc893524108c9934e10383dad588d83ca7496e72036269ae12e844ad6e95f5ac9516ccb6256488e2ccc3d64c2777d8689dc236ca0e08074d7f536d96b1292015a4b048a9776d84b988120a82f3ae6851711bb37d0bfbc6d278ffd501e084ffddace34522d02bab52ce04aa7902410db9edfa68534dd2883ee1c1ccbc29ffd93f12335d18880456759899a6c1f2ca95cd09b52241d17a05d41eca95395fa06bbf44cde648c1f136a4fbb099961bbf510b1c582ab57443c8ad29a8a952d705527a408ddc61dd558eaf9de8dd2bf9418587e342fe51ee7915ee7c1f9930cd1db340bf53539c30626e05beb1d28e5ce98537aeda0cc044e44506abe88258c7574d5ac1d3e383a20acd88addba411ff5c7a3abb27023ce234b0408b2cd54e1329ca323eb5aa5bc6860fe57965af528a869317b0973f89075b6647272762e45dc22dda6dd563c87b35090ccb183b0bccc7bf359c6f10827dfea581ea28af57277aaf5116caf05799b494f6e4c8572978c4cfb574d5c0e04e491c587590f9715cca760b68af7acd3c36050043c168ffa294a5a46ef7599d4c271fa5cfd55862076473a9ccac3f3c629d6e253a4c66aca7831c08ce47600e36ff6dfa3af561296ebb2dc11eaae6b64788df253ed3efe80caf3e97cd2a232a15437cba8db1c91b4bcc854b0a903bd1e64bb21bf1458d21ee816fe151c85ac545806ca8b37de364394b46e8c9a231cdc534916485dc67cc9fa83b501ecfbe02e8b13f213d8ebb29d6d8d42217b2bad5a9c94ad614267051c3c81c223df970f3a52df707685d756846b11e3f2ae2d344b5de46bd0757610271bacc9860103088d7093553d9964d6ef2655bbbbec183210f072396856df384e00fa756aa853d03c9f362a7ef3965c5cf7e7154cc319be654d72be91c4bed20e9253313dd9f7978d533838463b1681a18d2ba4a64b7a0c0fad0e0a7c7da584c106fc5f4c580193b28397fd7151f5e4731a760c8fc137a4039e2422c0ee56e736a7c751bbb870e2488dfb7c0e70b8009e7e5de50cb2a42ab3e6bc915542483cbd5e1998ef02ce21d5bec1fd0d6868eecc25a30b4af38112cb67c2568694d040f239a566340f457b6019dd1bb0d3f2f4ed1e2128bddfb218b586760dd0a1abaa47b5c50c7651604994ecfb7c6e5ad674d7f8708cb859185b1560323b5c93aebc251dbf8bd0937b32838fad4f29599b03869cf058e7c5393e2939481d32f7da84cbb7ca006d2c0fe7565cf57aeb36abc16aeaa31d60c54d0f389c9e8ec1d8e9bf04c529621ebfbca9341bb1e53008f304ae306ff90e94167f4bdde304e9c9ecd24d1d80846a9754a1ebfa052dac077318fb6bfc0dcbfc5e7b2ffcd30649f7c38d71bf15cd59ebd03b889463ac7bcf856bb3de077ddcb36543a5a9de00b824ffb32ae9d8a4d4814b78ed24e1198eaac968b20599b662b2f6954baba115a1d3d33367fee630efc1f46581c1466605dca6672ca415b751e27aaaf3ee0b3009eed273bee0079efa5f12546ded521fe8ec325f670f0975b5790f7ead4f0dba91c72cf55cedf786a93e066cb31c2bbe723ac9f151d98c4b26f4af5785cca5f6adefd564fe0951f245e3a568ca3c2b5bf61eaa77f159f9eb7b98d96a83eb0956bd523bc8fdebacc7fdf7d48862180c1413982f6d2b16a91b104bf407061987815aa7191b1f5bfaf5fb129ca3efde32219d4d9fdcf8a3d83c7083c965925d336e848b3fc118f6e066b61fcc9a1a662751f9e0531f8459d4619173aa3588fb52f57139a194fd070f4557d34af297dee1243ccea6a140568d7ef04e8d5b26fb2f5e96342e8a6faf65e50f6446a919e2a9136697b8464dde0b75f12665f704a6e407555cc4dd0ef3f6d06fc1c5c337ef6a1aa0c1ef71f11cc514519e8ac53b2a7fa7623129f0be81a7f978849be43d6f4d1a22fab5f91afff841792b50d2d47672b152437abb2af740c05a6b6f107162e856c9a0e4c3831f320fd2f8fb5bef404afbfca1c8f12db6656f3ddbe26e567f6777b093c613c06e7865211552eae8945368a8c155548beaa27aaf8c7d7797b468b1daf6aa9fb710b3e2bb3550c5dc38fc651878d26a93c3a34668806a1fc187d81ea52f4da9abbc14402c042e0437b9f4e829e2a058e5adbbf3214d1cde513ae182fd653e50c56d001ed96d5396cf7be2caed28a1f4bfc0daf71644f079552c28dc66094d2af66bbd30e16ddf75a5ece9f20a29242a0662ab6560c262ee8b68535fd6dac778bb1671d283d5056a6c16f0223fa0741a5acac19a959c1777ea1c430e512b99dbf657370aac6e19e690de84efeef52d1df8002fe8036d90d2941bdc788ef9aaa6603fae91a2d41663fe7c92f1459b13a3a48abe2d6fe44c6849416033e82f013000372c1ae94c5a8fbe6339f93edd882200b7f421a3278206071352c6a372b3a72e1836c86e5fe303433caa15a0b05aa9a90903f9c5609d1a020793f283c3f0c3c48dae1fde42eaee0acadd9571e0f74a9558831138018c901d44ce08815850cb6e8ec9cc3f155522f7d9bb3c2a16815dabc063fc3175114275029c80188d049a9798fc4b7adfa982d7889bac67a5ca6520d6d27350ae08fadbcc3de2d35d49a983dac43dd80af8eaeade5dc499786fc57fcb5bc9a6cec79c494d3a2cf1e542b570e748b1e923f83d731a7bda437fb5088b5b3d466ef21732c939f1ea86a73c7afb0375210f69659479782231d452d6b99a57101e5267984e53689733b3350d04bf6a9e0fccfaaa8792c8e8c2641120c0b1a831a49f843097fe0b7e5cf3f4d7a322f9f96e4cf3f9577c79c4a50a1e2ede9e6ed89134de6f54652c9374b68574dec8db19d6f1c1bc8c5b4c0390944cb41d7a29fdecfbc0b1406d72428e2938f4b7b90ebda4278beb742571ac76cad6acdbb611087958bd8cecd6608a9632d4b6386e5fa31e31813bed7b7167b5f8eaf7985d3bde65cbe5ff6a0aafa740dbb44f76213417fe777fb23fb3d0b466c473b52e573fcee58bf4e94925cb615b2ad7c8343380ea3436f96496172b18285592da01754adf5ff5d99c4d6a9cf6e1e390a9ab73488c1fb44e68bd1fb22cfc13abd142dda768d6e47157f0fcccd7f90c9ccb92cf0b2a94f358d20464438bd6d4284f67cf800534ace37195a4d6d73aedfeed1617e8b3dd12b86bc07683fb6c522012cfa352e2fddcddc68d7258f1539fb5c58e1e4cff7b664a426ed1f81dd810c9281968870988ba3d2a06cebb80ecc0957cb555a644e73855506fa4a76b816cb25af46fad3060ccaa91f388783750e87d7ddbf3ecd977d83cc0d02981762a468d7d5f427258687fcf9c3df50e64eb78e9aebc260c5abda8b6d30a35e7451821d3ffe5cea54650ff030fd08381d836bf153f24bd210c0efbe017e122e0078b71ab3574f5967c1baa483cd998b3ab30b5592d719971965a3f9e5b73d605495e87aef6ca8246bbdccdbc4844895c95ff595d55551da1e441e1dc5c42cf5a9171717b624b5d2ad4d063bbf51c529e707dbc16ddbf4f1731ee57a421e5af1fb01abaa3067871552f21d02aeb35fa676d81138e9b0dd31974f16641723f05958ac6a6766e5fe62e6a52e3fe9895d7692cd10d1dcee7830797d58365c5bccfb77ee5fde0552e5e864ae36c68ec4f7b22035e7643557dee681c7c54c5010d6c4d1e426e165b1b4acc7d0e56489126fdbcf52cb0ba6b463b5b48492a3b5cf78af99ff9372c0629e523f8557d59f7417d78766e51158ab8f38c496ddbeb78354130f8a20c6cf1f535c69a65cb88cded41ac763a6027e3a4d398b4ad9ce535b74b0068a41badf28aad78d7613f3e0865237e452513d62517ff9a44335b80fcfb143ec35a730f8cac95ec877035ca25810d30b5bb483ab095cb475e0bcac7510c476bc7c5109617520a2e7727c7f3f28b81a50194aa644f7ac1fd75e36f38e70ae72663812de5d179b53cf05863bd326f0bdd8e966271083d6b10c35eabb602fcd9634000f95d849d68883b44b9f4fa6993a6f16ce3ebf66d1611635d9cd72962d2768f567f8813f9cfd065f85a1a5374665ea0bdf733a579674947e45898b7631e1b9505f5d8d3d4ce44e4038754422ab30ae55f8fb4e25ccf290a30abcec99be8e8f9e321ab09fa6623ec16176dde00ae7980e0208947e5e20f3e73a28c59f66fb7d7bdc8de8726172c01337c38232bc6b0ebe18dca69189607357f1813493e4d689766f812bcf4bd46eb44376b51807ded74826fb23449cda1fa83514cab486215bb27667eaea52b4762095306a1eac0f39b7c1f3d08b1c4a088b6c52367c890ca038843a02ed2c17cda43a0b77c71677d25bdde823bef1b9a7dd134bf0001c99d4f0012c4bc66683fe12619a0d2559b49e0fc16d61cd3b59a7692e8dadaa98943c0ab0fea6468c346333388880d23ca40f8a3e41a96e61343c2cc3acc59590af024463465938ca8d29c2be2f02e8fcc4beca322c4c057db661968684d1111e131f0e33fe5e240e31a0d7699981d44beec4770277729f86382a041dc197b4b4eccbbeff77ca591b1601d94bc34b356b264e487783325c2825f762b6fd930ad2465a9220d94f34f3b8f5db3d90f54c6b6c4d7e87b83caaf8007b3c62fafa193b1758f81ef60a769106807c60b1e3aedf5d94f1c4f4a22823edff5ffee89beedeb2998b72a11c7b52a9c02c8f4ce888a46d6ef165f68b82e6c05b035c49db391b02ad799cd6a2fd0dba20ab39c5a410d327f58983bc35988adc74bacee6bad1ac0630ef0932e2926022cc13e86da665c4f8ad86b0f5f6525653929a26c6f93f54a2ec12588b6944b23039b258a6d3c6537988787b83ca3fe9d6b3048e1e5ed07f20c4be500a76128e017aad25d63b6a4b8d39dd3ce3653f9524678a94ec2faefba4d42c7f83a70f8c9c97bfb5b2f8de1a9ee8ab3229df50ddbf944762d7497d271486ada604c08f3066763fd7fb203e3b809c538d7f0f1c37946bf0881a2aa3cafb0a7f994857d31d36d1dcb340db04f0c3256b00b36468a794edcaa536414a9a5cd9618fad6713aae3f13723812b4849dd60a2681932a5ebd5f1b1adb3e0cd6f3de3ce8291b5d75745749e7a0161d317e25ad464b01b4fd72d6255bff48a3a323eea6bf16e96985cf10d09eb28f556d0d5cdf2d2e9ce0edc78ae28661eea3f72653131b0c3e3126a23f7dca5ae9e1fa7270eca0a8c4a5afe5a0d4d0e58a6f05028699994b75a20b3d7e9149e8b43a8950d20962bc1c7a17c357aa93ad370d40e8797fadbe339e163f857a00325be6c530b2f027e18f21843c8c95b6c7b58997d1ce35bf18b6299edf782526665c03641d5deb8c9e20a4e35a20cfcc4a"}}}, 0x100c) 07:32:24 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x9, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:24 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x105000000) 07:32:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x77}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x7a}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:25 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:25 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="191ccc3efba63984c9ffffffffff0009000000ad"], 0x42) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="191ccc3efba63984c9ffffffffff0009000000ad"], 0x42) io_setup(0x3, &(0x7f00000004c0)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) (async) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x88e5}, @void, @llc={@snap={0x1, 0x3, "90", ':tc', 0x890d, "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"}}}, 0x100c) 07:32:25 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000000) 07:32:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 166.108386][ T7879] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 166.117051][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:25 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x104000000) 07:32:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="191ccc3efba63984c9ffffffffff0009000000ad"], 0x42) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="191ccc3efba63984c9ffffffffff0009000000ad"], 0x42) io_setup(0x3, &(0x7f00000004c0)=0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x88e5}, @void, @llc={@snap={0x1, 0x3, "90", ':tc', 0x890d, "9f20e50ed4482ad8bcb52b71ded27fd22040228cc4125f1be445aaf1e019aa601f5379181b136f1057d98d7ae2606960576ba5049c47737fd30908d4ca486f0f8b549e4a42cb8a920025f674466e43ab59728edab1b78e0ad12d2e4c6d3b834fdaeb17054d8f8227814ef9722f67aa5cb3fd5163023af0b5f4a4cbecb3561b913ff928a0a10bbe42f562dac176e236bad1ef2a227ee2d7cb395f9b08fd89f7e60139e9e8b92149b5c81ba374eb9c8294552d9a54db376273bde13e03e1fd333b582bcf8d3946d48f602d97d88bdb4523e0118f761a9400a4abdbf2191aafe6d5381f367b0f4efad1f7f308f3a36d0d412c40dda1f651f2463b4d0ef85c4d977a7dd0793c37ce71625c3ab538c85a4f2580bcacb494967710772d40fc8e43687ac03323c152cd6fb46b020499f8d5d0a7a95b26b151e8df05accdb3523f6a893fc893524108c9934e10383dad588d83ca7496e72036269ae12e844ad6e95f5ac9516ccb6256488e2ccc3d64c2777d8689dc236ca0e08074d7f536d96b1292015a4b048a9776d84b988120a82f3ae6851711bb37d0bfbc6d278ffd501e084ffddace34522d02bab52ce04aa7902410db9edfa68534dd2883ee1c1ccbc29ffd93f12335d18880456759899a6c1f2ca95cd09b52241d17a05d41eca95395fa06bbf44cde648c1f136a4fbb099961bbf510b1c582ab57443c8ad29a8a952d705527a408ddc61dd558eaf9de8dd2bf9418587e342fe51ee7915ee7c1f9930cd1db340bf53539c30626e05beb1d28e5ce98537aeda0cc044e44506abe88258c7574d5ac1d3e383a20acd88addba411ff5c7a3abb27023ce234b0408b2cd54e1329ca323eb5aa5bc6860fe57965af528a869317b0973f89075b6647272762e45dc22dda6dd563c87b35090ccb183b0bccc7bf359c6f10827dfea581ea28af57277aaf5116caf05799b494f6e4c8572978c4cfb574d5c0e04e491c587590f9715cca760b68af7acd3c36050043c168ffa294a5a46ef7599d4c271fa5cfd55862076473a9ccac3f3c629d6e253a4c66aca7831c08ce47600e36ff6dfa3af561296ebb2dc11eaae6b64788df253ed3efe80caf3e97cd2a232a15437cba8db1c91b4bcc854b0a903bd1e64bb21bf1458d21ee816fe151c85ac545806ca8b37de364394b46e8c9a231cdc534916485dc67cc9fa83b501ecfbe02e8b13f213d8ebb29d6d8d42217b2bad5a9c94ad614267051c3c81c223df970f3a52df707685d756846b11e3f2ae2d344b5de46bd0757610271bacc9860103088d7093553d9964d6ef2655bbbbec183210f072396856df384e00fa756aa853d03c9f362a7ef3965c5cf7e7154cc319be654d72be91c4bed20e9253313dd9f7978d533838463b1681a18d2ba4a64b7a0c0fad0e0a7c7da584c106fc5f4c580193b28397fd7151f5e4731a760c8fc137a4039e2422c0ee56e736a7c751bbb870e2488dfb7c0e70b8009e7e5de50cb2a42ab3e6bc915542483cbd5e1998ef02ce21d5bec1fd0d6868eecc25a30b4af38112cb67c2568694d040f239a566340f457b6019dd1bb0d3f2f4ed1e2128bddfb218b586760dd0a1abaa47b5c50c7651604994ecfb7c6e5ad674d7f8708cb859185b1560323b5c93aebc251dbf8bd0937b32838fad4f29599b03869cf058e7c5393e2939481d32f7da84cbb7ca006d2c0fe7565cf57aeb36abc16aeaa31d60c54d0f389c9e8ec1d8e9bf04c529621ebfbca9341bb1e53008f304ae306ff90e94167f4bdde304e9c9ecd24d1d80846a9754a1ebfa052dac077318fb6bfc0dcbfc5e7b2ffcd30649f7c38d71bf15cd59ebd03b889463ac7bcf856bb3de077ddcb36543a5a9de00b824ffb32ae9d8a4d4814b78ed24e1198eaac968b20599b662b2f6954baba115a1d3d33367fee630efc1f46581c1466605dca6672ca415b751e27aaaf3ee0b3009eed273bee0079efa5f12546ded521fe8ec325f670f0975b5790f7ead4f0dba91c72cf55cedf786a93e066cb31c2bbe723ac9f151d98c4b26f4af5785cca5f6adefd564fe0951f245e3a568ca3c2b5bf61eaa77f159f9eb7b98d96a83eb0956bd523bc8fdebacc7fdf7d48862180c1413982f6d2b16a91b104bf407061987815aa7191b1f5bfaf5fb129ca3efde32219d4d9fdcf8a3d83c7083c965925d336e848b3fc118f6e066b61fcc9a1a662751f9e0531f8459d4619173aa3588fb52f57139a194fd070f4557d34af297dee1243ccea6a140568d7ef04e8d5b26fb2f5e96342e8a6faf65e50f6446a919e2a9136697b8464dde0b75f12665f704a6e407555cc4dd0ef3f6d06fc1c5c337ef6a1aa0c1ef71f11cc514519e8ac53b2a7fa7623129f0be81a7f978849be43d6f4d1a22fab5f91afff841792b50d2d47672b152437abb2af740c05a6b6f107162e856c9a0e4c3831f320fd2f8fb5bef404afbfca1c8f12db6656f3ddbe26e567f6777b093c613c06e7865211552eae8945368a8c155548beaa27aaf8c7d7797b468b1daf6aa9fb710b3e2bb3550c5dc38fc651878d26a93c3a34668806a1fc187d81ea52f4da9abbc14402c042e0437b9f4e829e2a058e5adbbf3214d1cde513ae182fd653e50c56d001ed96d5396cf7be2caed28a1f4bfc0daf71644f079552c28dc66094d2af66bbd30e16ddf75a5ece9f20a29242a0662ab6560c262ee8b68535fd6dac778bb1671d283d5056a6c16f0223fa0741a5acac19a959c1777ea1c430e512b99dbf657370aac6e19e690de84efeef52d1df8002fe8036d90d2941bdc788ef9aaa6603fae91a2d41663fe7c92f1459b13a3a48abe2d6fe44c6849416033e82f013000372c1ae94c5a8fbe6339f93edd882200b7f421a3278206071352c6a372b3a72e1836c86e5fe303433caa15a0b05aa9a90903f9c5609d1a020793f283c3f0c3c48dae1fde42eaee0acadd9571e0f74a9558831138018c901d44ce08815850cb6e8ec9cc3f155522f7d9bb3c2a16815dabc063fc3175114275029c80188d049a9798fc4b7adfa982d7889bac67a5ca6520d6d27350ae08fadbcc3de2d35d49a983dac43dd80af8eaeade5dc499786fc57fcb5bc9a6cec79c494d3a2cf1e542b570e748b1e923f83d731a7bda437fb5088b5b3d466ef21732c939f1ea86a73c7afb0375210f69659479782231d452d6b99a57101e5267984e53689733b3350d04bf6a9e0fccfaaa8792c8e8c2641120c0b1a831a49f843097fe0b7e5cf3f4d7a322f9f96e4cf3f9577c79c4a50a1e2ede9e6ed89134de6f54652c9374b68574dec8db19d6f1c1bc8c5b4c0390944cb41d7a29fdecfbc0b1406d72428e2938f4b7b90ebda4278beb742571ac76cad6acdbb611087958bd8cecd6608a9632d4b6386e5fa31e31813bed7b7167b5f8eaf7985d3bde65cbe5ff6a0aafa740dbb44f76213417fe777fb23fb3d0b466c473b52e573fcee58bf4e94925cb615b2ad7c8343380ea3436f96496172b18285592da01754adf5ff5d99c4d6a9cf6e1e390a9ab73488c1fb44e68bd1fb22cfc13abd142dda768d6e47157f0fcccd7f90c9ccb92cf0b2a94f358d20464438bd6d4284f67cf800534ace37195a4d6d73aedfeed1617e8b3dd12b86bc07683fb6c522012cfa352e2fddcddc68d7258f1539fb5c58e1e4cff7b664a426ed1f81dd810c9281968870988ba3d2a06cebb80ecc0957cb555a644e73855506fa4a76b816cb25af46fad3060ccaa91f388783750e87d7ddbf3ecd977d83cc0d02981762a468d7d5f427258687fcf9c3df50e64eb78e9aebc260c5abda8b6d30a35e7451821d3ffe5cea54650ff030fd08381d836bf153f24bd210c0efbe017e122e0078b71ab3574f5967c1baa483cd998b3ab30b5592d719971965a3f9e5b73d605495e87aef6ca8246bbdccdbc4844895c95ff595d55551da1e441e1dc5c42cf5a9171717b624b5d2ad4d063bbf51c529e707dbc16ddbf4f1731ee57a421e5af1fb01abaa3067871552f21d02aeb35fa676d81138e9b0dd31974f16641723f05958ac6a6766e5fe62e6a52e3fe9895d7692cd10d1dcee7830797d58365c5bccfb77ee5fde0552e5e864ae36c68ec4f7b22035e7643557dee681c7c54c5010d6c4d1e426e165b1b4acc7d0e56489126fdbcf52cb0ba6b463b5b48492a3b5cf78af99ff9372c0629e523f8557d59f7417d78766e51158ab8f38c496ddbeb78354130f8a20c6cf1f535c69a65cb88cded41ac763a6027e3a4d398b4ad9ce535b74b0068a41badf28aad78d7613f3e0865237e452513d62517ff9a44335b80fcfb143ec35a730f8cac95ec877035ca25810d30b5bb483ab095cb475e0bcac7510c476bc7c5109617520a2e7727c7f3f28b81a50194aa644f7ac1fd75e36f38e70ae72663812de5d179b53cf05863bd326f0bdd8e966271083d6b10c35eabb602fcd9634000f95d849d68883b44b9f4fa6993a6f16ce3ebf66d1611635d9cd72962d2768f567f8813f9cfd065f85a1a5374665ea0bdf733a579674947e45898b7631e1b9505f5d8d3d4ce44e4038754422ab30ae55f8fb4e25ccf290a30abcec99be8e8f9e321ab09fa6623ec16176dde00ae7980e0208947e5e20f3e73a28c59f66fb7d7bdc8de8726172c01337c38232bc6b0ebe18dca69189607357f1813493e4d689766f812bcf4bd46eb44376b51807ded74826fb23449cda1fa83514cab486215bb27667eaea52b4762095306a1eac0f39b7c1f3d08b1c4a088b6c52367c890ca038843a02ed2c17cda43a0b77c71677d25bdde823bef1b9a7dd134bf0001c99d4f0012c4bc66683fe12619a0d2559b49e0fc16d61cd3b59a7692e8dadaa98943c0ab0fea6468c346333388880d23ca40f8a3e41a96e61343c2cc3acc59590af024463465938ca8d29c2be2f02e8fcc4beca322c4c057db661968684d1111e131f0e33fe5e240e31a0d7699981d44beec4770277729f86382a041dc197b4b4eccbbeff77ca591b1601d94bc34b356b264e487783325c2825f762b6fd930ad2465a9220d94f34f3b8f5db3d90f54c6b6c4d7e87b83caaf8007b3c62fafa193b1758f81ef60a769106807c60b1e3aedf5d94f1c4f4a22823edff5ffee89beedeb2998b72a11c7b52a9c02c8f4ce888a46d6ef165f68b82e6c05b035c49db391b02ad799cd6a2fd0dba20ab39c5a410d327f58983bc35988adc74bacee6bad1ac0630ef0932e2926022cc13e86da665c4f8ad86b0f5f6525653929a26c6f93f54a2ec12588b6944b23039b258a6d3c6537988787b83ca3fe9d6b3048e1e5ed07f20c4be500a76128e017aad25d63b6a4b8d39dd3ce3653f9524678a94ec2faefba4d42c7f83a70f8c9c97bfb5b2f8de1a9ee8ab3229df50ddbf944762d7497d271486ada604c08f3066763fd7fb203e3b809c538d7f0f1c37946bf0881a2aa3cafb0a7f994857d31d36d1dcb340db04f0c3256b00b36468a794edcaa536414a9a5cd9618fad6713aae3f13723812b4849dd60a2681932a5ebd5f1b1adb3e0cd6f3de3ce8291b5d75745749e7a0161d317e25ad464b01b4fd72d6255bff48a3a323eea6bf16e96985cf10d09eb28f556d0d5cdf2d2e9ce0edc78ae28661eea3f72653131b0c3e3126a23f7dca5ae9e1fa7270eca0a8c4a5afe5a0d4d0e58a6f05028699994b75a20b3d7e9149e8b43a8950d20962bc1c7a17c357aa93ad370d40e8797fadbe339e163f857a00325be6c530b2f027e18f21843c8c95b6c7b58997d1ce35bf18b6299edf782526665c03641d5deb8c9e20a4e35a20cfcc4a"}}}, 0x100c) 07:32:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x2}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:25 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:25 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x106000000) [ 166.434082][ T7884] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 166.442432][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x3}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 166.525161][ T7896] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 166.533616][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:25 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x100002000) 07:32:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x4}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:25 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x18a0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x422400, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="fffffffffffffffeffffffff8200020086dd60bcade6000829"], 0x42) 07:32:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x5}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:26 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x107000000) [ 166.872908][ T7904] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 166.881443][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.921587][ T7908] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 166.929954][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x422400, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="fffffffffffffffeffffffff8200020086dd60bcade6000829"], 0x42) 07:32:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x6}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:26 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0xfffffffe, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:26 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x105000000) 07:32:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x7}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 167.182877][ T7919] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 167.191292][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x8}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 167.241688][ T7925] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 167.250260][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.279538][ T7928] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 167.287997][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x9}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x422400, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="fffffffffffffffeffffffff8200020086dd60bcade6000829"], 0x42) (rerun: 32) 07:32:26 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:26 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x101000000) 07:32:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0xa}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 167.511000][ T7933] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 167.519658][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:26 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000002) 07:32:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0xb}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x8000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:26 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x16, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:26 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x106000000) 07:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0xc}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0xd}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0xe}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0xf}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x8000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:27 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x102000000) 07:32:27 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x18a0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:27 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000003) 07:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x10}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x8000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:27 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x107000000) 07:32:27 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0xfffffffe, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x11}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffff0a000000000800000000000000adfaec5fc39d90e6000829"], 0x42) 07:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x12}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x14}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x25}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x34}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffff0a000000000800000000000000adfaec5fc39d90e6000829"], 0x42) 07:32:28 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x103000000) 07:32:28 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x48}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:28 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000002) 07:32:28 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000004) 07:32:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffff0a000000000800000000000000adfaec5fc39d90e6000829"], 0x42) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffff0a000000000800000000000000adfaec5fc39d90e6000829"], 0x42) (async) 07:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x4c}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x60}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 169.261677][ T8018] validate_nla: 13 callbacks suppressed [ 169.261690][ T8018] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 169.275590][ T8018] __nla_validate_parse: 13 callbacks suppressed [ 169.275602][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x68}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) io_setup(0x3, &(0x7f00000004c0)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) write$tun(r3, &(0x7f0000000000)={@void, @val={0x3, 0x4, 0x277, 0x0, 0x8, 0xfff}, @llc={@snap={0x1, 0x0, "9744", "ce026c", 0x41e, "875a47f1954973e12708bf689f7323f67a06602f5683f768ba3182b099bc8a80b8d22aa24e10f45343f4c0368899402f3b96c41f0c6db3f2155dc21190b850c922dac8be7f1722f07d5dbca5b70f1924d2ee5136a6d34acf81c784f35f08a40357b3ad11feda2fa78f0b"}}}, 0x7d) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) [ 169.346357][ T8027] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 169.354652][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:28 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x2, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x6c}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 169.414262][ T8031] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 169.422655][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.462152][ T8033] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 169.470541][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:29 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x104000000) 07:32:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x74}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) (async) write$tun(r3, &(0x7f0000000000)={@void, @val={0x3, 0x4, 0x277, 0x0, 0x8, 0xfff}, @llc={@snap={0x1, 0x0, "9744", "ce026c", 0x41e, "875a47f1954973e12708bf689f7323f67a06602f5683f768ba3182b099bc8a80b8d22aa24e10f45343f4c0368899402f3b96c41f0c6db3f2155dc21190b850c922dac8be7f1722f07d5dbca5b70f1924d2ee5136a6d34acf81c784f35f08a40357b3ad11feda2fa78f0b"}}}, 0x7d) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:29 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x3, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:29 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000005) 07:32:29 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000003) [ 170.101523][ T8045] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 170.109921][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x7a}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 170.193068][ T8058] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 170.201418][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.232250][ T8061] netlink: 'syz-executor.4': attribute type 195 has an invalid length. 07:32:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) io_setup(0x3, &(0x7f00000004c0)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) write$tun(r3, &(0x7f0000000000)={@void, @val={0x3, 0x4, 0x277, 0x0, 0x8, 0xfff}, @llc={@snap={0x1, 0x0, "9744", "ce026c", 0x41e, "875a47f1954973e12708bf689f7323f67a06602f5683f768ba3182b099bc8a80b8d22aa24e10f45343f4c0368899402f3b96c41f0c6db3f2155dc21190b850c922dac8be7f1722f07d5dbca5b70f1924d2ee5136a6d34acf81c784f35f08a40357b3ad11feda2fa78f0b"}}}, 0x7d) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) io_setup(0x3, &(0x7f00000004c0)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) (async) write$tun(r3, &(0x7f0000000000)={@void, @val={0x3, 0x4, 0x277, 0x0, 0x8, 0xfff}, @llc={@snap={0x1, 0x0, "9744", "ce026c", 0x41e, "875a47f1954973e12708bf689f7323f67a06602f5683f768ba3182b099bc8a80b8d22aa24e10f45343f4c0368899402f3b96c41f0c6db3f2155dc21190b850c922dac8be7f1722f07d5dbca5b70f1924d2ee5136a6d34acf81c784f35f08a40357b3ad11feda2fa78f0b"}}}, 0x7d) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (async) 07:32:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x2}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x3}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:29 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) [ 170.240580][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.270010][ T8065] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 170.278626][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.321588][ T8073] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 170.329892][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:30 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x105000000) 07:32:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x4}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:30 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x5, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:30 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000006) 07:32:30 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000004) 07:32:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x5}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 171.107558][ T8085] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 171.115966][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x6}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x7}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x8}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:30 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x6, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x9}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:30 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x7, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:30 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x106000000) 07:32:30 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000007) 07:32:31 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000005) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xa}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) io_setup(0x3, &(0x7f00000004c0)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)='-7', 0x2}]) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x6002}, @val={0x4, 0x1, 0x200, 0x3, 0x1, 0x7fff}, @ipv4=@generic={{0x15, 0x4, 0x3, 0x25, 0x56, 0x64, 0x0, 0x2, 0x2, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x3f, 0x3, [{0x1, 0xd, "2003009cdb79f4d4af1c84"}, {0x5, 0x2}, {0x5, 0x11, "c8478fb4652cccb0ab1c3daa4fe0e2"}, {0x6, 0xf, "b21ac3bea52c69425e4a0deabb"}, {0x0, 0xa, "b60c8c4e96ab8024"}]}, @noop]}}, "40a9"}}, 0x64) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:31 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x8, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xb}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xc}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xd}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xe}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:31 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x9, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xf}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x10}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:31 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000008) 07:32:31 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000006) 07:32:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)='-7', 0x2}]) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x6002}, @val={0x4, 0x1, 0x200, 0x3, 0x1, 0x7fff}, @ipv4=@generic={{0x15, 0x4, 0x3, 0x25, 0x56, 0x64, 0x0, 0x2, 0x2, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x3f, 0x3, [{0x1, 0xd, "2003009cdb79f4d4af1c84"}, {0x5, 0x2}, {0x5, 0x11, "c8478fb4652cccb0ab1c3daa4fe0e2"}, {0x6, 0xf, "b21ac3bea52c69425e4a0deabb"}, {0x0, 0xa, "b60c8c4e96ab8024"}]}, @noop]}}, "40a9"}}, 0x64) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:31 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0xa, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:31 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x107000000) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x11}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x12}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x14}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x25}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x34}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x48}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x4c}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0xb, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x60}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)='-7', 0x2}]) (async, rerun: 64) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x6002}, @val={0x4, 0x1, 0x200, 0x3, 0x1, 0x7fff}, @ipv4=@generic={{0x15, 0x4, 0x3, 0x25, 0x56, 0x64, 0x0, 0x2, 0x2, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x3f, 0x3, [{0x1, 0xd, "2003009cdb79f4d4af1c84"}, {0x5, 0x2}, {0x5, 0x11, "c8478fb4652cccb0ab1c3daa4fe0e2"}, {0x6, 0xf, "b21ac3bea52c69425e4a0deabb"}, {0x0, 0xa, "b60c8c4e96ab8024"}]}, @noop]}}, "40a9"}}, 0x64) (rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (rerun: 64) 07:32:32 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000009) 07:32:32 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000002) 07:32:32 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000007) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x68}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x6c}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x74}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x7a}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x146}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0xc, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x300}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @generic={0x9c, 0x8, 0xf, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x43f6}, @alu={0x7, 0x0, 0xb, 0xa, 0x1, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xb9, &(0x7f0000000400)=""/185, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x9, 0xa498, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, r5], &(0x7f0000000500)=[{0x3, 0x2, 0x10, 0x3}, {0x1, 0x5, 0x3, 0xc}, {0x5, 0x2, 0x2, 0x7}, {0x0, 0x3, 0x0, 0x9}, {0x4, 0x2, 0xd, 0x1}, {0x4, 0x2, 0x3, 0x3}, {0x1, 0x4, 0x9, 0xa}], 0x10, 0x10001}, 0x90) io_setup(0x3, &(0x7f00000004c0)=0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000)='-7', 0x2}]) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x4000}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ff15babc2cffffffffffffff8200000829a373593bb5f3fe6b550ace258eec60b0667dc74360b69f09011ad3274ce66c3908ae8f8610b31b2a61cfecddd0488ad1fc159d1500bec44b44767eb628090e6736d6f21e5100f8a65203f461a68afd180fdd1a4b836458773b6ed2b7b5b962"], 0x42) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000040)=0x2, 0x4) 07:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x500}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 173.910170][ T8211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=8211 comm=syz-executor.5 07:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x600}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:33 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0xd, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) [ 174.339068][ T8216] validate_nla: 27 callbacks suppressed [ 174.339084][ T8216] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 174.352967][ T8216] __nla_validate_parse: 28 callbacks suppressed [ 174.352981][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:33 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x10800000a) 07:32:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @generic={0x9c, 0x8, 0xf, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x43f6}, @alu={0x7, 0x0, 0xb, 0xa, 0x1, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xb9, &(0x7f0000000400)=""/185, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x9, 0xa498, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, r5], &(0x7f0000000500)=[{0x3, 0x2, 0x10, 0x3}, {0x1, 0x5, 0x3, 0xc}, {0x5, 0x2, 0x2, 0x7}, {0x0, 0x3, 0x0, 0x9}, {0x4, 0x2, 0xd, 0x1}, {0x4, 0x2, 0x3, 0x3}, {0x1, 0x4, 0x9, 0xa}], 0x10, 0x10001}, 0x90) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000)='-7', 0x2}]) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x4000}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ff15babc2cffffffffffffff8200000829a373593bb5f3fe6b550ace258eec60b0667dc74360b69f09011ad3274ce66c3908ae8f8610b31b2a61cfecddd0488ad1fc159d1500bec44b44767eb628090e6736d6f21e5100f8a65203f461a68afd180fdd1a4b836458773b6ed2b7b5b962"], 0x42) (async) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000040)=0x2, 0x4) 07:32:33 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000003) 07:32:33 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000008) 07:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x700}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 174.447572][ T8227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=8227 comm=syz-executor.5 [ 174.476718][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 07:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x900}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 174.505481][ T8226] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 174.513822][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x83}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_LLADDR={0xa}]}, 0x30}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @generic={0x9c, 0x8, 0xf, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x43f6}, @alu={0x7, 0x0, 0xb, 0xa, 0x1, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xb9, &(0x7f0000000400)=""/185, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x9, 0xa498, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, r5], &(0x7f0000000500)=[{0x3, 0x2, 0x10, 0x3}, {0x1, 0x5, 0x3, 0xc}, {0x5, 0x2, 0x2, 0x7}, {0x0, 0x3, 0x0, 0x9}, {0x4, 0x2, 0xd, 0x1}, {0x4, 0x2, 0x3, 0x3}, {0x1, 0x4, 0x9, 0xa}], 0x10, 0x10001}, 0x90) io_setup(0x3, &(0x7f00000004c0)=0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000)='-7', 0x2}]) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x4000}) socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ff15babc2cffffffffffffff8200000829a373593bb5f3fe6b550ace258eec60b0667dc74360b69f09011ad3274ce66c3908ae8f8610b31b2a61cfecddd0488ad1fc159d1500bec44b44767eb628090e6736d6f21e5100f8a65203f461a68afd180fdd1a4b836458773b6ed2b7b5b962"], 0x42) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000040)=0x2, 0x4) 07:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x9fa}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 174.564887][ T8237] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 174.573331][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x9fb}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:33 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0xe, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) [ 174.603268][ T8239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=8239 comm=syz-executor.5 [ 174.612488][ T8242] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 174.624995][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.635210][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 07:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xa00}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 174.681611][ T8244] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 174.690071][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.717610][ T8248] netlink: 'syz-executor.4': attribute type 195 has an invalid length. 07:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xb00}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 174.725920][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.758890][ T8250] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 174.767503][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:34 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x10800000b) 07:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xc00}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:34 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000004) [ 175.146778][ T8253] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 175.155427][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) io_setup(0x3, &(0x7f00000004c0)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x800}) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) 07:32:34 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0xf, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xd00}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:34 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000009) 07:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xe00}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 175.407570][ T8263] netlink: 'syz-executor.4': attribute type 195 has an invalid length. 07:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xec0}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xf00}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x1100}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 175.472082][ T8270] netlink: 'syz-executor.4': attribute type 195 has an invalid length. 07:32:34 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:35 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x10800000c) 07:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x1200}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:35 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x11, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async, rerun: 64) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (rerun: 64) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x800}) (async) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) 07:32:35 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000a) 07:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x1400}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:35 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000005) 07:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x2500}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x3400}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x4601}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x4800}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x4c00}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 176.460398][ T8297] ================================================================== [ 176.468480][ T8297] BUG: KCSAN: data-race in __filemap_remove_folio / page_remove_rmap [ 176.476577][ T8297] [ 176.478885][ T8297] write to 0xffffea0004f85098 of 8 bytes by task 8304 on cpu 0: [ 176.486493][ T8297] __filemap_remove_folio+0x224/0x330 [ 176.491850][ T8297] invalidate_inode_pages2_range+0x404/0x720 [ 176.497810][ T8297] kiocb_invalidate_pages+0x1b1/0x1e0 [ 176.503357][ T8297] __iomap_dio_rw+0x5a7/0x1080 [ 176.508196][ T8297] iomap_dio_rw+0x40/0x90 [ 176.512519][ T8297] ext4_file_write_iter+0xaaa/0x1200 [ 176.517787][ T8297] do_iter_write+0x4b4/0x7b0 [ 176.522368][ T8297] vfs_iter_write+0x56/0x70 [ 176.526851][ T8297] iter_file_splice_write+0x462/0x7e0 [ 176.532202][ T8297] direct_splice_actor+0x8a/0xb0 [ 176.537136][ T8297] splice_direct_to_actor+0x31d/0x690 [ 176.542510][ T8297] do_splice_direct+0x10d/0x190 [ 176.547361][ T8297] do_sendfile+0x3b6/0x9a0 [ 176.552292][ T8297] __x64_sys_sendfile64+0x110/0x150 [ 176.557561][ T8297] do_syscall_64+0x41/0xc0 [ 176.562132][ T8297] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 176.568011][ T8297] [ 176.570343][ T8297] read to 0xffffea0004f85098 of 8 bytes by task 8297 on cpu 1: [ 176.577962][ T8297] page_remove_rmap+0x135/0x2b0 [ 176.582793][ T8297] unmap_page_range+0xd3f/0x1db0 [ 176.587725][ T8297] unmap_single_vma+0x142/0x1d0 [ 176.592570][ T8297] zap_page_range_single+0x219/0x2b0 [ 176.597954][ T8297] unmap_mapping_range_tree+0xa6/0xe0 [ 176.603394][ T8297] unmap_mapping_pages+0xc0/0xd0 [ 176.608665][ T8297] invalidate_inode_pages2_range+0x203/0x720 [ 176.614713][ T8297] kiocb_invalidate_pages+0x1b1/0x1e0 [ 176.620075][ T8297] __iomap_dio_rw+0x5a7/0x1080 [ 176.624913][ T8297] iomap_dio_rw+0x40/0x90 [ 176.629244][ T8297] ext4_file_write_iter+0xaaa/0x1200 [ 176.634522][ T8297] do_iter_write+0x4b4/0x7b0 [ 176.639182][ T8297] vfs_iter_write+0x56/0x70 [ 176.643676][ T8297] iter_file_splice_write+0x462/0x7e0 [ 176.649107][ T8297] direct_splice_actor+0x8a/0xb0 [ 176.654226][ T8297] splice_direct_to_actor+0x31d/0x690 [ 176.659590][ T8297] do_splice_direct+0x10d/0x190 [ 176.664452][ T8297] do_sendfile+0x3b6/0x9a0 [ 176.668851][ T8297] __x64_sys_sendfile64+0x110/0x150 [ 176.674122][ T8297] do_syscall_64+0x41/0xc0 [ 176.678640][ T8297] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 176.684710][ T8297] [ 176.687032][ T8297] value changed: 0xffff8881066e34d0 -> 0x0000000000000000 [ 176.694141][ T8297] [ 176.696463][ T8297] Reported by Kernel Concurrency Sanitizer on: [ 176.702703][ T8297] CPU: 1 PID: 8297 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 176.713027][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 176.723240][ T8297] ================================================================== 07:32:36 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x12, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x6000}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:36 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x10800000d) 07:32:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)='-7', 0x2}]) (async, rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x800}) (async, rerun: 64) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) 07:32:36 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000b) 07:32:36 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000006) 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x6800}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x6c00}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:36 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x13, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x7400}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 176.992817][ T8297] syz-executor.0 (8297) used greatest stack depth: 9496 bytes left 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0x7a00}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7401bef6}}, './file0\x00'}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x2}, @void, @eth={@random="a21f9151e095", @random="d64a16bafc08", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "38f7f3", 0x25c, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@hopopts={0x84, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x20, 0x20, 0x9, [@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @remote, @loopback]}, @hopopts={0x62, 0x23, '\x00', [@generic={0x1, 0xf1, "fc3e58f54cce8e2d2ebda31279e24d126555885180b623470ac555611cbc5183512ae7f3cd19596f3321251782c2b778c63e848c7afd0a6fc536842ab0f423f5ee7dcadd4d8ab829d4110802f03a600407ad102ee907d5e188355fcfec7879ecd3be6d889d6dc907033a3b6d1a42b84548cb04a60970ee8a8ba27a253fbde28549dbb1c27f5cdd8ac0db08253985e539b163031d0ea45edcb2cb3158189f733b3659b9628c88ddd5120192d6628e35d2879c1cf95466eb8e53895142248483dd78f9f620945b2f7d69411545e071c3a8d93b6cb73e8bcad9b8c09eff8a8c332153fdc2666996e1a75dad6f5c31f69aa553"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}]}], {0x4e21, 0x4e21, 0xbc, 0x0, @gue={{0x2, 0x0, 0x3, 0x9, 0x100, @val=0x80}, "df2b0a124aba0ade70fba722e9046328ad50b6a5f05fc2767e6870ceaf199fea5459130d1105495afdccf04db346977a0a938b88c3c1fab532e90fe5e4f35a6f15d36707090a619d00f908630b3df204f1943b0967150dc463f1332355b779647a5695e99460cbe02318b5171e5b772886060c86a6277861bcdf3b872c3271fb305ddb95cd858ce47c6519a4a7a4211f9c5c3366c4c30abac6a8c9ce835a6eb0cb9a9c6ccb041d76f0935365"}}}}}}}}, 0x296) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xc00e}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xfa09}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{0x67, 0x0, 0xfb09}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7401bef6}}, './file0\x00'}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x2}, @void, @eth={@random="a21f9151e095", @random="d64a16bafc08", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "38f7f3", 0x25c, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@hopopts={0x84, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x20, 0x20, 0x9, [@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @remote, @loopback]}, @hopopts={0x62, 0x23, '\x00', [@generic={0x1, 0xf1, "fc3e58f54cce8e2d2ebda31279e24d126555885180b623470ac555611cbc5183512ae7f3cd19596f3321251782c2b778c63e848c7afd0a6fc536842ab0f423f5ee7dcadd4d8ab829d4110802f03a600407ad102ee907d5e188355fcfec7879ecd3be6d889d6dc907033a3b6d1a42b84548cb04a60970ee8a8ba27a253fbde28549dbb1c27f5cdd8ac0db08253985e539b163031d0ea45edcb2cb3158189f733b3659b9628c88ddd5120192d6628e35d2879c1cf95466eb8e53895142248483dd78f9f620945b2f7d69411545e071c3a8d93b6cb73e8bcad9b8c09eff8a8c332153fdc2666996e1a75dad6f5c31f69aa553"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}]}], {0x4e21, 0x4e21, 0xbc, 0x0, @gue={{0x2, 0x0, 0x3, 0x9, 0x100, @val=0x80}, "df2b0a124aba0ade70fba722e9046328ad50b6a5f05fc2767e6870ceaf199fea5459130d1105495afdccf04db346977a0a938b88c3c1fab532e90fe5e4f35a6f15d36707090a619d00f908630b3df204f1943b0967150dc463f1332355b779647a5695e99460cbe02318b5171e5b772886060c86a6277861bcdf3b872c3271fb305ddb95cd858ce47c6519a4a7a4211f9c5c3366c4c30abac6a8c9ce835a6eb0cb9a9c6ccb041d76f0935365"}}}}}}}}, 0x296) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:36 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x14, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:36 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x10800000e) 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x4}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7401bef6}}, './file0\x00'}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x2}, @void, @eth={@random="a21f9151e095", @random="d64a16bafc08", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "38f7f3", 0x25c, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@hopopts={0x84, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x20, 0x20, 0x9, [@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @remote, @loopback]}, @hopopts={0x62, 0x23, '\x00', [@generic={0x1, 0xf1, "fc3e58f54cce8e2d2ebda31279e24d126555885180b623470ac555611cbc5183512ae7f3cd19596f3321251782c2b778c63e848c7afd0a6fc536842ab0f423f5ee7dcadd4d8ab829d4110802f03a600407ad102ee907d5e188355fcfec7879ecd3be6d889d6dc907033a3b6d1a42b84548cb04a60970ee8a8ba27a253fbde28549dbb1c27f5cdd8ac0db08253985e539b163031d0ea45edcb2cb3158189f733b3659b9628c88ddd5120192d6628e35d2879c1cf95466eb8e53895142248483dd78f9f620945b2f7d69411545e071c3a8d93b6cb73e8bcad9b8c09eff8a8c332153fdc2666996e1a75dad6f5c31f69aa553"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}]}], {0x4e21, 0x4e21, 0xbc, 0x0, @gue={{0x2, 0x0, 0x3, 0x9, 0x100, @val=0x80}, "df2b0a124aba0ade70fba722e9046328ad50b6a5f05fc2767e6870ceaf199fea5459130d1105495afdccf04db346977a0a938b88c3c1fab532e90fe5e4f35a6f15d36707090a619d00f908630b3df204f1943b0967150dc463f1332355b779647a5695e99460cbe02318b5171e5b772886060c86a6277861bcdf3b872c3271fb305ddb95cd858ce47c6519a4a7a4211f9c5c3366c4c30abac6a8c9ce835a6eb0cb9a9c6ccb041d76f0935365"}}}}}}}}, 0x296) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7401bef6}}, './file0\x00'}) (async) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x2}, @void, @eth={@random="a21f9151e095", @random="d64a16bafc08", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "38f7f3", 0x25c, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@hopopts={0x84, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x20, 0x20, 0x9, [@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @remote, @loopback]}, @hopopts={0x62, 0x23, '\x00', [@generic={0x1, 0xf1, "fc3e58f54cce8e2d2ebda31279e24d126555885180b623470ac555611cbc5183512ae7f3cd19596f3321251782c2b778c63e848c7afd0a6fc536842ab0f423f5ee7dcadd4d8ab829d4110802f03a600407ad102ee907d5e188355fcfec7879ecd3be6d889d6dc907033a3b6d1a42b84548cb04a60970ee8a8ba27a253fbde28549dbb1c27f5cdd8ac0db08253985e539b163031d0ea45edcb2cb3158189f733b3659b9628c88ddd5120192d6628e35d2879c1cf95466eb8e53895142248483dd78f9f620945b2f7d69411545e071c3a8d93b6cb73e8bcad9b8c09eff8a8c332153fdc2666996e1a75dad6f5c31f69aa553"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}]}], {0x4e21, 0x4e21, 0xbc, 0x0, @gue={{0x2, 0x0, 0x3, 0x9, 0x100, @val=0x80}, "df2b0a124aba0ade70fba722e9046328ad50b6a5f05fc2767e6870ceaf199fea5459130d1105495afdccf04db346977a0a938b88c3c1fab532e90fe5e4f35a6f15d36707090a619d00f908630b3df204f1943b0967150dc463f1332355b779647a5695e99460cbe02318b5171e5b772886060c86a6277861bcdf3b872c3271fb305ddb95cd858ce47c6519a4a7a4211f9c5c3366c4c30abac6a8c9ce835a6eb0cb9a9c6ccb041d76f0935365"}}}}}}}}, 0x296) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (async) 07:32:36 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000c) 07:32:36 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000007) 07:32:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0xb}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0xc}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x10}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x29}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829d709000000abad8ed372c6d541e44fa3fb9131b09f9e0d86172dfede6a25478e865c10d046292552d954cf0e0419983ac6c2479dc31efc46dfa0a7c4f0ece289105c5719887e00013875c730747d01c1f5b172c5b0391581a21d9d7ce648690bca0f768f88c8519f7ef4020287b3f218bedbe074551d1c0d6dd5d5"], 0x42) 07:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x67}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x5d00}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x15, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829d709000000abad8ed372c6d541e44fa3fb9131b09f9e0d86172dfede6a25478e865c10d046292552d954cf0e0419983ac6c2479dc31efc46dfa0a7c4f0ece289105c5719887e00013875c730747d01c1f5b172c5b0391581a21d9d7ce648690bca0f768f88c8519f7ef4020287b3f218bedbe074551d1c0d6dd5d5"], 0x42) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829d709000000abad8ed372c6d541e44fa3fb9131b09f9e0d86172dfede6a25478e865c10d046292552d954cf0e0419983ac6c2479dc31efc46dfa0a7c4f0ece289105c5719887e00013875c730747d01c1f5b172c5b0391581a21d9d7ce648690bca0f768f88c8519f7ef4020287b3f218bedbe074551d1c0d6dd5d5"], 0x42) (async) 07:32:37 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x10800000f) 07:32:37 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000d) 07:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x6900}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000008) 07:32:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829d709000000abad8ed372c6d541e44fa3fb9131b09f9e0d86172dfede6a25478e865c10d046292552d954cf0e0419983ac6c2479dc31efc46dfa0a7c4f0ece289105c5719887e00013875c730747d01c1f5b172c5b0391581a21d9d7ce648690bca0f768f88c8519f7ef4020287b3f218bedbe074551d1c0d6dd5d5"], 0x42) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829d709000000abad8ed372c6d541e44fa3fb9131b09f9e0d86172dfede6a25478e865c10d046292552d954cf0e0419983ac6c2479dc31efc46dfa0a7c4f0ece289105c5719887e00013875c730747d01c1f5b172c5b0391581a21d9d7ce648690bca0f768f88c8519f7ef4020287b3f218bedbe074551d1c0d6dd5d5"], 0x42) (async) 07:32:37 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x2}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x3}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0xa}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'team_slave_1\x00', @remote}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x25}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:38 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x17, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x64}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:38 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000010) 07:32:38 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000009) 07:32:38 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000e) 07:32:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'team_slave_1\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x67}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp}, 0x20) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'team_slave_1\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) (async) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) [ 179.354623][ T8428] validate_nla: 27 callbacks suppressed [ 179.354634][ T8428] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 179.368626][ T8428] __nla_validate_parse: 31 callbacks suppressed [ 179.368639][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x146}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x300}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'netdevsim0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:38 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x18, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 179.521384][ T8451] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 179.529796][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.564666][ T8455] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 179.573184][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:39 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000011) 07:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x2}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:39 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'netdevsim0\x00', @remote}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:39 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000a) 07:32:39 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x19, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:39 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000f) 07:32:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'netdevsim0\x00', @remote}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 180.290263][ T8469] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 180.298752][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 180.368009][ T8481] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 180.376339][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:39 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x1a, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) [ 180.412215][ T8483] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 180.420637][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x5}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 180.518775][ T8487] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 180.527160][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 180.628613][ T8490] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 180.637063][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:40 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000012) 07:32:40 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x1b, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:40 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000b) 07:32:40 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000010) 07:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 181.250763][ T8497] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 181.259109][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x9}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xa}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 181.339222][ T8506] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 181.347617][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:40 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x1c, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xb}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xc}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xd}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:40 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000013) 07:32:40 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x1d, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:40 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000c) 07:32:40 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000011) 07:32:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80c0, 0x55) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r3, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x1, 0x3, 0x7, 0x401, 0x3ff, 0x401}, @ipv6=@tcp={0x8, 0x6, "0ab98a", 0x23a, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[@routing={0x6c, 0x14, 0x2, 0x7f, 0x0, [@loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, @local, @empty, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1]}, @routing={0x3c, 0x8, 0x3, 0x1, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @local]}, @srh={0x32, 0x8, 0x4, 0x4, 0x6, 0x50, 0xf000, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x5}, @pad1]}, @routing={0x6, 0x2, 0x0, 0x2, 0x0, [@remote]}], {{0x4e21, 0x4e20, 0x41424344, r3, 0x0, 0x0, 0x12, 0x80, 0x7, 0x0, 0x8001, {[@md5sig={0x13, 0x12, "fc9136f0241ca53f772b3bbcd748f6d8"}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1ff, 0x4}, @exp_fastopen={0xfe, 0x11, 0xf989, "dffd3546fdc84322502e9976b5"}]}}, {"e6901046ee280afd335e88b928508b511a9cc35fc5cc24779d13019ebb12274dde4469f307f6a40a1c5b6b658c134d0e368196225a2a7341422d03ac79e070bb4232a9fa564d18111def1f4d2cc74130ec877eaffe089aec75aef7d4fae2742a9bebcf24db2fa6f8b79addef854859d54251783ae8fdba40967f"}}}}}, 0x26c) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xf}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80c0, 0x55) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r3, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x1, 0x3, 0x7, 0x401, 0x3ff, 0x401}, @ipv6=@tcp={0x8, 0x6, "0ab98a", 0x23a, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[@routing={0x6c, 0x14, 0x2, 0x7f, 0x0, [@loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, @local, @empty, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1]}, @routing={0x3c, 0x8, 0x3, 0x1, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @local]}, @srh={0x32, 0x8, 0x4, 0x4, 0x6, 0x50, 0xf000, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x5}, @pad1]}, @routing={0x6, 0x2, 0x0, 0x2, 0x0, [@remote]}], {{0x4e21, 0x4e20, 0x41424344, r3, 0x0, 0x0, 0x12, 0x80, 0x7, 0x0, 0x8001, {[@md5sig={0x13, 0x12, "fc9136f0241ca53f772b3bbcd748f6d8"}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1ff, 0x4}, @exp_fastopen={0xfe, 0x11, 0xf989, "dffd3546fdc84322502e9976b5"}]}}, {"e6901046ee280afd335e88b928508b511a9cc35fc5cc24779d13019ebb12274dde4469f307f6a40a1c5b6b658c134d0e368196225a2a7341422d03ac79e070bb4232a9fa564d18111def1f4d2cc74130ec877eaffe089aec75aef7d4fae2742a9bebcf24db2fa6f8b79addef854859d54251783ae8fdba40967f"}}}}}, 0x26c) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80c0, 0x55) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r3, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) (async) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x1, 0x3, 0x7, 0x401, 0x3ff, 0x401}, @ipv6=@tcp={0x8, 0x6, "0ab98a", 0x23a, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[@routing={0x6c, 0x14, 0x2, 0x7f, 0x0, [@loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, @local, @empty, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1]}, @routing={0x3c, 0x8, 0x3, 0x1, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @local]}, @srh={0x32, 0x8, 0x4, 0x4, 0x6, 0x50, 0xf000, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x5}, @pad1]}, @routing={0x6, 0x2, 0x0, 0x2, 0x0, [@remote]}], {{0x4e21, 0x4e20, 0x41424344, r3, 0x0, 0x0, 0x12, 0x80, 0x7, 0x0, 0x8001, {[@md5sig={0x13, 0x12, "fc9136f0241ca53f772b3bbcd748f6d8"}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1ff, 0x4}, @exp_fastopen={0xfe, 0x11, 0xf989, "dffd3546fdc84322502e9976b5"}]}}, {"e6901046ee280afd335e88b928508b511a9cc35fc5cc24779d13019ebb12274dde4469f307f6a40a1c5b6b658c134d0e368196225a2a7341422d03ac79e070bb4232a9fa564d18111def1f4d2cc74130ec877eaffe089aec75aef7d4fae2742a9bebcf24db2fa6f8b79addef854859d54251783ae8fdba40967f"}}}}}, 0x26c) (async) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x10}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x11}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x1e, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80c0, 0x55) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r3, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x1, 0x3, 0x7, 0x401, 0x3ff, 0x401}, @ipv6=@tcp={0x8, 0x6, "0ab98a", 0x23a, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[@routing={0x6c, 0x14, 0x2, 0x7f, 0x0, [@loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, @local, @empty, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1]}, @routing={0x3c, 0x8, 0x3, 0x1, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @local]}, @srh={0x32, 0x8, 0x4, 0x4, 0x6, 0x50, 0xf000, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x5}, @pad1]}, @routing={0x6, 0x2, 0x0, 0x2, 0x0, [@remote]}], {{0x4e21, 0x4e20, 0x41424344, r3, 0x0, 0x0, 0x12, 0x80, 0x7, 0x0, 0x8001, {[@md5sig={0x13, 0x12, "fc9136f0241ca53f772b3bbcd748f6d8"}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1ff, 0x4}, @exp_fastopen={0xfe, 0x11, 0xf989, "dffd3546fdc84322502e9976b5"}]}}, {"e6901046ee280afd335e88b928508b511a9cc35fc5cc24779d13019ebb12274dde4469f307f6a40a1c5b6b658c134d0e368196225a2a7341422d03ac79e070bb4232a9fa564d18111def1f4d2cc74130ec877eaffe089aec75aef7d4fae2742a9bebcf24db2fa6f8b79addef854859d54251783ae8fdba40967f"}}}}}, 0x26c) 07:32:41 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000014) 07:32:41 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000d) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000012) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x34}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x48}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x60}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) io_setup(0x3, &(0x7f00000004c0)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)='-7', 0x2}]) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000200)=""/235) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:41 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x21, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x68}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 183.195115][ T8564] syz-executor.2 (8564) used greatest stack depth: 9336 bytes left 07:32:42 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000015) 07:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) io_setup(0x3, &(0x7f00000004c0)=0x0) (async, rerun: 32) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)='-7', 0x2}]) (async) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000200)=""/235) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:42 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000013) 07:32:42 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x22, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:42 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000e) 07:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7a}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x146}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x300}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x500}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x600}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x700}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 183.645280][ T8600] ================================================================== [ 183.653435][ T8600] BUG: KCSAN: data-race in __filemap_remove_folio / page_remove_rmap [ 183.661520][ T8600] [ 183.663823][ T8600] write to 0xffffea00050b8198 of 8 bytes by task 8607 on cpu 0: [ 183.671531][ T8600] __filemap_remove_folio+0x224/0x330 [ 183.676891][ T8600] invalidate_inode_pages2_range+0x404/0x720 [ 183.682852][ T8600] kiocb_invalidate_pages+0x1b1/0x1e0 [ 183.688299][ T8600] __iomap_dio_rw+0x5a7/0x1080 [ 183.693047][ T8600] iomap_dio_rw+0x40/0x90 [ 183.697362][ T8600] ext4_file_write_iter+0xaaa/0x1200 [ 183.702630][ T8600] do_iter_write+0x4b4/0x7b0 [ 183.707375][ T8600] vfs_iter_write+0x56/0x70 [ 183.713556][ T8600] iter_file_splice_write+0x462/0x7e0 [ 183.719092][ T8600] direct_splice_actor+0x8a/0xb0 [ 183.724016][ T8600] splice_direct_to_actor+0x31d/0x690 [ 183.729469][ T8600] do_splice_direct+0x10d/0x190 [ 183.734334][ T8600] do_sendfile+0x3b6/0x9a0 [ 183.738735][ T8600] __x64_sys_sendfile64+0x110/0x150 [ 183.744090][ T8600] do_syscall_64+0x41/0xc0 [ 183.748493][ T8600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 183.754389][ T8600] [ 183.756691][ T8600] read to 0xffffea00050b8198 of 8 bytes by task 8600 on cpu 1: [ 183.764304][ T8600] page_remove_rmap+0x135/0x2b0 [ 183.769153][ T8600] unmap_page_range+0xd3f/0x1db0 [ 183.774102][ T8600] unmap_single_vma+0x142/0x1d0 [ 183.778978][ T8600] zap_page_range_single+0x219/0x2b0 [ 183.784747][ T8600] unmap_mapping_range_tree+0xa6/0xe0 [ 183.790126][ T8600] unmap_mapping_pages+0xc0/0xd0 [ 183.795055][ T8600] invalidate_inode_pages2_range+0x203/0x720 [ 183.801014][ T8600] kiocb_invalidate_pages+0x1b1/0x1e0 [ 183.806377][ T8600] __iomap_dio_rw+0x5a7/0x1080 [ 183.812360][ T8600] iomap_dio_rw+0x40/0x90 [ 183.816677][ T8600] ext4_file_write_iter+0xaaa/0x1200 [ 183.823954][ T8600] do_iter_write+0x4b4/0x7b0 [ 183.828799][ T8600] vfs_iter_write+0x56/0x70 [ 183.833286][ T8600] iter_file_splice_write+0x462/0x7e0 [ 183.838740][ T8600] direct_splice_actor+0x8a/0xb0 [ 183.843822][ T8600] splice_direct_to_actor+0x31d/0x690 [ 183.849299][ T8600] do_splice_direct+0x10d/0x190 [ 183.854322][ T8600] do_sendfile+0x3b6/0x9a0 [ 183.858821][ T8600] __x64_sys_sendfile64+0x110/0x150 [ 183.864106][ T8600] do_syscall_64+0x41/0xc0 [ 183.868529][ T8600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 183.874442][ T8600] [ 183.876785][ T8600] value changed: 0xffff88810657ebb0 -> 0x0000000000000000 [ 183.884004][ T8600] [ 183.886317][ T8600] Reported by Kernel Concurrency Sanitizer on: [ 183.892653][ T8600] CPU: 1 PID: 8600 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 [ 183.903179][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 183.913222][ T8600] ================================================================== 07:32:43 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000016) 07:32:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) io_setup(0x3, &(0x7f00000004c0)=0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)='-7', 0x2}]) (async) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000200)=""/235) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) 07:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x900}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:43 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x23, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:43 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10800000f) 07:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x9fa}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:43 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000021) 07:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x9fb}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xa00}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xb00}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xc00}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x2}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x42) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="5c427271b7b9da333b4a5ead44534ea067602714ae5adcde573bad5419a7c65a34d0666ce2f5c0ce4633607f15ad0370eebcefa7515da377eaa123e3a5269f725ea09c179e080255e551cd4c93ee640e749fdf10ed2a9274452328a1c9675f8f9fbe70d454366d2b07c53ca1ed2ae68dfb8d4e59ca", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$TUNSETLINK(r2, 0x400454cd, 0x302) 07:32:44 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x24, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xd00}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x2}) (async, rerun: 32) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x42) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="5c427271b7b9da333b4a5ead44534ea067602714ae5adcde573bad5419a7c65a34d0666ce2f5c0ce4633607f15ad0370eebcefa7515da377eaa123e3a5269f725ea09c179e080255e551cd4c93ee640e749fdf10ed2a9274452328a1c9675f8f9fbe70d454366d2b07c53ca1ed2ae68dfb8d4e59ca", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x302) 07:32:44 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000022) 07:32:44 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000017) 07:32:44 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000010) 07:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xe00}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 185.097646][ T8656] validate_nla: 31 callbacks suppressed [ 185.097658][ T8656] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 185.111731][ T8656] __nla_validate_parse: 31 callbacks suppressed [ 185.111742][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x2}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x42) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="5c427271b7b9da333b4a5ead44534ea067602714ae5adcde573bad5419a7c65a34d0666ce2f5c0ce4633607f15ad0370eebcefa7515da377eaa123e3a5269f725ea09c179e080255e551cd4c93ee640e749fdf10ed2a9274452328a1c9675f8f9fbe70d454366d2b07c53ca1ed2ae68dfb8d4e59ca", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$TUNSETLINK(r2, 0x400454cd, 0x302) 07:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xec0}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 185.197907][ T8670] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 185.206401][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xf00}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x81) ioctl$TUNSETLINK(r2, 0x400454cd, 0xf) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1000fff65d040000ca7ef39db26d0ceabbf400"/32], 0x10}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000080)=""/38, 0xfffffffffffffd2b}, {&(0x7f0000000300)=""/230, 0xee}, {&(0x7f0000000100)=""/34, 0x22}], 0x4}, 0x2042) [ 185.250811][ T8679] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 185.259215][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1100}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:44 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x25, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) [ 185.297317][ T8681] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 185.305754][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = fsmount(0xffffffffffffffff, 0x1, 0x81) ioctl$TUNSETLINK(r2, 0x400454cd, 0xf) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1000fff65d040000ca7ef39db26d0ceabbf400"/32], 0x10}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000080)=""/38, 0xfffffffffffffd2b}, {&(0x7f0000000300)=""/230, 0xee}, {&(0x7f0000000100)=""/34, 0x22}], 0x4}, 0x2042) 07:32:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1200}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 185.347544][ T8685] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 185.355972][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.414055][ T8695] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 185.422479][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:45 executing program 2: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000023) 07:32:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = fsmount(0xffffffffffffffff, 0x1, 0x81) ioctl$TUNSETLINK(r2, 0x400454cd, 0xf) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8200020086dd60bcade6000829"], 0x42) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1000fff65d040000ca7ef39db26d0ceabbf400"/32], 0x10}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000080)=""/38, 0xfffffffffffffd2b}, {&(0x7f0000000300)=""/230, 0xee}, {&(0x7f0000000100)=""/34, 0x22}], 0x4}, 0x2042) 07:32:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1400}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:45 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x26, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 07:32:45 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x108000011) 07:32:45 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000000) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sendfile(r3, r3, 0x0, 0x108000018) 07:32:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x2500}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 186.057269][ T8709] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 186.065742][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x50f202, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)='-7', 0x2}]) r3 = dup(r0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x8000}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x42) 07:32:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3400}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 186.133729][ T8717] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 186.142184][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4601}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 07:32:45 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x27, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) [ 186.175202][ T8721] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 186.184130][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:32:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4800}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) [ 186.216990][ T8725] netlink: 'syz-executor.4': attribute type 195 has an invalid length. [ 186.225412][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.