[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 80.763641][ T31] audit: type=1800 audit(1574809487.810:25): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 80.786506][ T31] audit: type=1800 audit(1574809487.830:26): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 80.910134][ T31] audit: type=1800 audit(1574809487.950:27): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.205' (ECDSA) to the list of known hosts. 2019/11/26 23:05:01 fuzzer started 2019/11/26 23:05:05 dialing manager at 10.128.0.26:45101 2019/11/26 23:05:05 syscalls: 2397 2019/11/26 23:05:05 code coverage: enabled 2019/11/26 23:05:05 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/11/26 23:05:05 extra coverage: enabled 2019/11/26 23:05:05 setuid sandbox: enabled 2019/11/26 23:05:05 namespace sandbox: enabled 2019/11/26 23:05:05 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/26 23:05:05 fault injection: enabled 2019/11/26 23:05:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/26 23:05:05 net packet injection: enabled 2019/11/26 23:05:05 net device setup: enabled 2019/11/26 23:05:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/26 23:05:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 23:08:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x10000000003c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bf", 0xb}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x37c, &(0x7f0000000400)=[{&(0x7f0000002e00)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b0145f8af9aa0ed0e18bc50509eaef21c8e03842a97df3a462ea3f9d5f83bf1d4d2875f0d5b24e941483f863cd2ea7c769bd3e594fb173dd873c7d9a3fd20939ad1d5867881ed77a078007b4972aba36cae02004373a6a74d74cb15a52c5f8426cb6f235d38048fd91f5d6100fd58a335df10add227d804167ba191c7a035c5a2a916e7fef18a6003578820b3e0be26a22f2c149f40a0335cadcca64a5e44179e6ce4d7f7c16e8a96c5be7cdf66eef901cb8eeabc94bae30acca8c6fa02889c32311044dcbc9a2e02e0632f7f9aa96849abede543773745e4652fccc503003f10cd68ddab594969ad36cb622ed7ba22dc46a80fb63ac2c561a80ae5c10b295b9f75d9536ba1ac24b8e9ae217611ffe79cb9422158475c1a89a51547d13c03b68d75ffb5717a35f381774567871e9e4190272c97eafcfa0a07a751d0bc8eeb0c206e12b2cff1065a3d5622635fa44c0dcb0722ad4c97e6b7d5844b2e9bab9ba1d083fa2930a3ea267d7f15d817e2b2e055ccfbaf019292f6156efd3a9a13ea90ecf59fc1bf35c6626db1c6759a50ed84acefd3cdb3532da1f23a262055223e7a3a62f15eeb8060dc9cfa30e6783757ae2f0ac6ed75d3212591ccd", 0x27d}], 0x1}, 0x0) syzkaller login: [ 284.756044][T11932] IPVS: ftp: loaded support on port[0] = 21 [ 284.894699][T11932] chnl_net:caif_netlink_parms(): no params data found [ 284.961180][T11932] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.968481][T11932] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.978242][T11932] device bridge_slave_0 entered promiscuous mode [ 284.989848][T11932] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.997123][T11932] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.005918][T11932] device bridge_slave_1 entered promiscuous mode [ 285.039114][T11932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.052206][T11932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.087564][T11932] team0: Port device team_slave_0 added [ 285.097487][T11932] team0: Port device team_slave_1 added [ 285.277445][T11932] device hsr_slave_0 entered promiscuous mode [ 285.483455][T11932] device hsr_slave_1 entered promiscuous mode [ 285.838658][T11932] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.845987][T11932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.853814][T11932] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.861013][T11932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.943823][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.954787][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.082227][T11932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.142600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.151182][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.186418][T11932] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.218055][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.228000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.237140][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.244384][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.314884][T11932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.325783][T11932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.354418][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.363894][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.372969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.380129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.389170][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.399140][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.409183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.419041][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.428700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.438476][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.448133][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.457423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.467269][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.476524][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.587011][T11932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.725498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.734563][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.743270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.750892][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 23:08:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x10000000003c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c10", 0x13}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x37c, &(0x7f0000000400)=[{&(0x7f0000002e00)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b0145f8af9aa0ed0e18bc50509eaef21c8e03842a97df3a462ea3f9d5f83bf1d4d2875f0d5b24e941483f863cd2ea7c769bd3e594fb173dd873c7d9a3fd20939ad1d5867881ed77a078007b4972aba36cae02004373a6a74d74cb15a52c5f8426cb6f235d38048fd91f5d6100fd58a335df10add227d804167ba191c7a035c5a2a916e7fef18a6003578820b3e0be26a22f2c149f40a0335cadcca64a5e44179e6ce4d7f7c16e8a96c5be7cdf66eef901cb8eeabc94bae30acca8c6fa02889c32311044dcbc9a2e02e0632f7f9aa96849abede543773745e4652fccc503003f10cd68ddab594969ad36cb622ed7ba22dc46a80fb63ac2c561a80ae5c10b295b9f75d9536ba1ac24b8e9ae217611ffe79cb9422158475c1a89a51547d13c03b68d75ffb5717a35f381774567871e9e4190272c97eafcfa0a07a751d0bc8eeb0c206e12b2cff1065a3d5622635fa44c0dcb0722ad4c97e6b7d5844b2e9bab9ba1d083fa2930a3ea267d7f15d817e2b2e055ccfbaf019292f6156efd3a9a13ea90ecf59fc1bf35c6626db1c6759a50ed84acefd3cdb3532da1f23a262055223e7a3a62f15eeb8060dc9cfa30e6783757ae2f0ac6ed75d3212591ccd", 0x27d}], 0x1}, 0x0) 23:08:14 executing program 0: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3f}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x400, 0x28282) r0 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x3, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@loopback, @initdev}, &(0x7f0000000900)=0xc) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$9p(0xffffffffffffffff, &(0x7f0000000200)="6074718d3635db885481d318f746eed89da68d6a6402a599f5f75e167631b967dd06ba4bae26782b3ad4b8", 0x2b) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) socket(0x1, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x13) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getrandom(&(0x7f0000000b40)=""/4096, 0x1000, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, 0x0, 0x0, 0x7a) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000600)={0xcadd, {{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x20}, 0x4}}}, 0x88) 23:08:14 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 23:08:14 executing program 0: 23:08:14 executing program 0: 23:08:14 executing program 0: r0 = socket(0x10, 0x1000040000000003, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x16, 0x7f, 0x6a2e, 0x100, 0x7}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) write(r0, &(0x7f0000000000)="22000000150007068d000005004c0204020803130100000008000200410209e376c2", 0x22) [ 287.498109][T11989] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.510805][T11990] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 23:08:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x7, 0x9]) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000005100303afffe8003437f050dff24f50003000088ffff0200000000000000000000000000018600907800070200601e11000100000018010000000000001803000005000001ff05000000000000000000000000000178de7d76ba37b69f0e2b1ed8603d9831a742715c5c8af2730cdc41f0d499707670fd26f4e211184aa66875a61fc9fcc03ad71b0c8f3dd26854b6e918727fa154e410e2fc1f05bb671a6598aee7fddf5b62eeae5bd96b44ba6ddf732e107af5483fe383f44ef2eb9f8e8336ac7f91bb955630e03efbb6fe6cd6b1968a6cda4809020ecbe1ecafe8b17a934c21e1feed683028c8947e64cbd5dcef1fb6f4df217f327a758c33cf443a9eb80959bee3365306ccac4a05dd109d5265b92a71b5ad3e12fedb1b2221408323af9f065c24f2951a91b355b798"], 0x0) [ 287.621107][T11993] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:08:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000300)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x7, @remote}, @in6={0xa, 0x4e22, 0x1000, @rand_addr="d7d1fd2b9bf3c9d65e3aec29214be99b", 0x6}, @in6={0xa, 0x4e21, 0x80000001, @mcast2, 0x3ff}, @in={0x2, 0x4e20, @rand_addr=0x101}], 0x74) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xd8, 0x0, &(0x7f00000000c0)="335cdf99c9bd2335fe4a577d61c26a0787ac9d60591b4cee7482d265e8fcc29b71246c15b2dbd375d2d0e0ed453e1bf91633ced47a301f41e2c0e82a1805380da506df1d86ccbefe0b7f8adbbf37cd46a99b581275b4bac83304a2f4cf22f34429e1108957c3fb89f63ab1e93382f38ae76a01348234f3278761c9e5aa51c70fe00d0b8d1a1cd259f0eaf6092ccf680e90120c94a9dc19b2ad8fbf15ee9d147aba81a29b18c8a51a88ceb84b1f32ca70766c546642d142287e9f4f2ba037ec7e69130268c2b74150423bb867d03680d87a3652e4181018c0", &(0x7f0000000040), 0x3, 0x0, 0x70, 0x61, &(0x7f00000001c0)="6ffa61619c45d1778d0599c3b88d601345571cd471412947e308694b287c56376e97e7d29931d073dec0add183903f95f8f89dbae9966156d01352bfa058a405e2a69b35b432c327004941e655dfe932c4c2b640ad9826fdc5b5d2feaf86e4d3f9a27bc86471998296c44b2a395a1723", &(0x7f0000000240)="1ae78af53e40c9d74f62beb929c67b04ebdaa5bf54a3a61b35268d61bbd5a6c51829c990c0f9c2f75b5aa24cb97948213a4418cc81d2687ba1fd20c9b0c54f32378ff44ef3534e23cba4e611aa7062b99355711f513bb413f668d1b2a09fc1f8bb"}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x102}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 23:08:15 executing program 0: getpid() r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) getdents(r1, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) syz_open_dev$amidi(&(0x7f0000001780)='/dev/amidi#\x00', 0x0, 0x193102) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001800)="c815890fd072613fd8104fabb7ce8c4701e04133eb040000009c36d5c3fd938a4d244e7aa2b969aa9631a47bd9d6f2168a32d393") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2c, 0x0, 0x0, 0x0) r4 = dup2(r0, r3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001b00)='ns\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000000010087de280432589f286fbb767469000c000200080001000059f33efb90cf5d71000000d12f3f00b03ce2488cc291cd2b", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@ipv6_deladdr={0x2c, 0x15, 0xa985015b68e83a95, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0xffffff00, 0xe9, &(0x7f0000000340)=""/233, 0x41100, 0x4, [], r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x9, 0x3f, 0xaec4}, 0x10}, 0x70) ioctl$LOOP_SET_FD(r4, 0x4c00, r10) recvmmsg(r5, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001b40)={{{@in=@multicast1, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000001c40)=0xe8) [ 288.202932][T12002] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 288.224913][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.312158][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:08:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) fstatfs(r3, &(0x7f00000001c0)=""/176) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 288.525062][T12011] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 288.548874][T12011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.556566][T12011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:08:15 executing program 1: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x9, 0x71, 0x9, 0x2, 0xc, 0x9, 0x60, 0x1, 0xffffb701, 0x2}) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x100, 0x103) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r2, r0, &(0x7f0000000140)=0xffffffffffff7fff, 0x8) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000180)={0x3, 0xb4f, 0x0, 0x1, 0x20, 0x80000000}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0xa000, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000200)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r2, 0x96ba5000) r4 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x800, 0x315000) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x80) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000340)=0x7fffffff, 0x4) r5 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x442, 0xac00) ioctl$TIOCLINUX2(r5, 0x541c, &(0x7f00000003c0)={0x2, 0x2, 0x4, 0x3, 0x210d, 0xe7}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000440)="b383efc6b91a34fd558a1ba057d84a4e", 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000480), &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @remote}, 0x42}}, 0x7ff, 0x40, 0xffffffff, 0x3f, 0xfffffffe}, &(0x7f00000005c0)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000600)=@assoc_value={r7, 0x7bf}, &(0x7f0000000640)=0x8) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vsock\x00', 0x8100, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r8, 0x40046411, &(0x7f00000006c0)=0xffffffff) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x20080, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f0000000740)={0x9, 0x400, [{0xf55b, 0x0, 0x401}, {0xffff, 0x0, 0x1}, {0x8, 0x0, 0x5}, {0x8a, 0x0, 0x1f}, {0xffffffff, 0x0, 0x9}, {0x9c2, 0x0, 0xffffffff}, {0x7ff, 0x0, 0x9}, {0x1, 0x0, 0xff}, {0x2, 0x0, 0x7b1}]}) fsopen(&(0x7f0000000800)='binfmt_misc\x00', 0x1) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000840)='/dev/dlm-control\x00', 0x143101, 0x0) ioctl$UI_SET_PHYS(r10, 0x4008556c, &(0x7f0000000880)='syz1\x00') [ 288.571849][T12011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.581000][T12011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:08:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x32314247}}) r2 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x7b, &(0x7f00000000c0)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r7, 0x4cdf, 0x30, 0x3ff, 0x3}, &(0x7f00000000c0)=0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r8 = socket$inet(0x10, 0x4, 0x20) sendmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="1f0000001e0007040d00001f6c000000000400080023780400ff7e00000000", 0x1f}], 0x1}, 0x0) 23:08:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x7fffffff}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x200, 0x80000000, 0x8, 0x8}}) r5 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, 0x0) [ 288.966316][T12019] IPVS: ftp: loaded support on port[0] = 21 23:08:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000000c0)={0x6bf2f216ff1e2d47, 0x1, [0x7f, 0x9, 0x1f, 0x3, 0x0, 0x7, 0x0, 0x80000000]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(r2, r0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) write$vnet(r0, &(0x7f0000000000)={0x1, {0x0, 0xffffffffffffff94, 0x0}}, 0x11) [ 289.155661][T12019] chnl_net:caif_netlink_parms(): no params data found [ 289.216804][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.224278][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.233015][T12019] device bridge_slave_0 entered promiscuous mode [ 289.244496][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.252131][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.261062][T12019] device bridge_slave_1 entered promiscuous mode [ 289.294860][T12019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.309274][T12019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.342065][T12019] team0: Port device team_slave_0 added [ 289.351500][T12019] team0: Port device team_slave_1 added [ 289.437908][T12019] device hsr_slave_0 entered promiscuous mode [ 289.474734][T12019] device hsr_slave_1 entered promiscuous mode 23:08:16 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0xb3, 0xff, 0x0, 0x4, 0x5, 0x8, 0x8, 0x2, 0x0, 0x1, 0x0, 0x2, 0x8, 0x7f, 0x5d, 0x9}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r12}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@ipv6_deladdr={0x2c, 0x15, 0xa985015b68e83a95, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newlink={0x2c, 0x10, 0xe3b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, 0x3}, [@IFLA_IFALIASn={0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) [ 289.523021][T12019] debugfs: Directory 'hsr0' with parent '/' already present! 23:08:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fcntl$getown(r4, 0x9) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffeeb, &(0x7f0000000200)=[{&(0x7f0000000100)="2e0000001a00813c4a5f942b3d00a00f80ecdb4cb904024865160b0008000200000012001d000800da1b40d817fd", 0x2e}], 0x1}, 0x0) [ 289.705824][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.713131][T12019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.720863][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.728181][T12019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.939485][T12056] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.995045][T12056] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.089246][T12019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.159220][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.184684][ T12] bridge0: port 1(bridge_slave_0) entered disabled state 23:08:17 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r0, 0x0, r3) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000e6ffffff0000000004000000"], 0x14}}, 0x1040) [ 290.213306][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.274055][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 290.324460][T12019] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.358267][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.369087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.378125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.385374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.469922][T12019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.480466][T12019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.524092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.534098][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.543114][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.550283][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.558779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.568793][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.578775][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.588587][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.598146][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.607951][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 23:08:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x10b081) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x30b002) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 290.617566][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.626846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.636413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.645564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.768506][T12019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.880465][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 290.886736][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 291.002933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 291.009283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 291.035576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.044815][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.053334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.061000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.070976][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 291.071487][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 291.125067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 291.131270][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 291.256431][T12078] Unknown ioctl 1074029585 [ 291.276320][T12079] Unknown ioctl 1074029585 23:08:18 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/packet\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000004c0)={&(0x7f0000000000), &(0x7f0000000100)=""/182, 0x6d6a3173cf643fdb}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0xc2a, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x1, 0x385}) readahead(r3, 0xfff, 0x7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) r4 = socket(0x10, 0x400000000080803, 0x0) write(r4, &(0x7f0000001540)="240000001a00cd18e289d3659248001d020b49ffed000000801028000800030001000000", 0x24) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) [ 291.434430][ C0] hrtimer: interrupt took 31463 ns [ 291.514152][T12082] IPVS: ftp: loaded support on port[0] = 21 [ 291.604178][T12066] syz-executor.0 (12066) used greatest stack depth: 53640 bytes left 23:08:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x10b081) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x30b002) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 292.153527][T12082] IPVS: ftp: loaded support on port[0] = 21 23:08:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000000000000f0ffffffffffff1f0000000000000084000000000000000000000120000000000000c04ed0d59b"], 0x38}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 23:08:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x80000) write$UHID_INPUT2(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0c0000005a00e9513b2d50ecf1c167218ffd4b33478987cea6b62f01846fc660c4c0f1ad39974d9a85d9019e87faca9576680937257361212a8c8def3d8c5fa87edf6b77cac2d158a838d6895ce936f1fe06e21e0a3d10cfb6fc345776f309a6"], 0x60) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video35\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x1b0001}, [@ldst={0xffffffbd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x481, &(0x7f00000001c0)=""/195, 0x0, 0x0, [0xff5fff5f]}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x2c) 23:08:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x70, 0x3, 0x20, 0x80, 0x2, 0x0, 0x6c1, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000300), 0x2}, 0x2048, 0x4, 0x80000001, 0x1, 0x80, 0x82e3, 0x6}, r6, 0x2, 0xffffffffffffffff, 0x8) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r5, 0x5, "0f07c9", "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"}}, 0x110) sendmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x100, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018005f00e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500154002008178a80016000f000300e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81edff0f0000b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 292.616912][T12100] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:08:19 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES16=r4]}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002028}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004800}, 0x14800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) 23:08:19 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)={0x7, [0x8, 0x8, 0xa995, 0x401, 0xed, 0x4, 0x7]}, &(0x7f0000000200)=0x12) r1 = socket$inet6(0xa, 0x5, 0x0) shutdown(r1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x100000000000012) sendmmsg$inet(r1, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) 23:08:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x80) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = semget$private(0x0, 0x2, 0x0) r3 = semget(0x1, 0x1, 0x125) semctl$GETZCNT(r3, 0x2, 0xf, &(0x7f0000000440)=""/4096) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000400)=""/183) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000000080)=0x5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) [ 293.086671][T12119] binder: 12117:12119 ioctl c018620b 20000000 returned -14 23:08:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000002800070500"/20, @ANYRES32=r3, @ANYBLOB="0000ffff0000ffff000000000c000100677265640000000004000200bf25bfb92eb2b6c9f9fc0196ffa8328838cbfaeaee9c51835a0340c603ed042cab8785b64a4f126fa398420bff3aca70953552fe14b13848d5381f3826cb98db051f819bd1986d73e1ec9ed8863b05"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x20000, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 23:08:20 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005480)=[{0x0}, {&(0x7f0000004240)="dc", 0x1}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000d0100007fffff00"], 0x10}}], 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 23:08:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="ebcb614e5aadd7abf870af7654ac11c38c98d63934b9435c2f78070f55b59a2e85725e454601955b823e91ea2beea7b871c9a29c8443e27d5c1ef60892530823d756a36d0c798bfb6736", 0x4a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x10c804, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:08:20 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005480)=[{0x0}, {&(0x7f0000004240)="dc", 0x1}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000d0100007fffff00"], 0x10}}], 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 293.490333][T12130] kvm: emulating exchange as write 23:08:20 executing program 1: r0 = socket(0x10, 0x800000000080003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a000307ffff00fb56138b18fc73e1000c00000008000a00c402f941e43cb401e3cd0f8103dd5663d891e29594ddddce885c53cc2662d2962ce9f92a55f45115c3d3d210eca162eed17903c1056972bee979974a3daf4dcc547bb187948781d426a37df38d520a622075fc35a46184d2762f82fafe38b8023071e178077cdd92d1f15f9a731e083f709b790a73478905c0e3849c671a213038bc46e07188d4ebe8d3cc8233211b821249afe7828a2658ecf7fd630fb024d930e9e37ad0a0aaaa14194b443e7dddcb2fd120327ab50f75d0dcd6a4b3e0b6c8325a2d9b3f4bc2607a921832af14d96ca107fa153ef15b35ca6a65ec0dcad1ee3ed1c95bb6e215829c1d0a3f0ab434dbdabb78a9ad7e0b678a224e9783fb7f3ae3318eff7fb3bf29cbc295f23d93aeb20c970da213d0fba9b7c37abbc6561fe853f008dccdfd1f184e03598ef8b23048b851324bb1033b235f9d26435727f34902de12de04dc801837e5637e3da7393aaa6992c16b3e9d1732f4f3ea2f8d11d24d3abd2c638880075bf506b529b740a0e2efa873f600"/427, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 23:08:20 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x14) sendto$inet6(r0, &(0x7f00000009c0)="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", 0x534, 0xc001, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14) sendto$inet6(r0, &(0x7f00000003c0)="3ce95c98b66a9cdea42aca63276ef1eca3f038047504ba09072b9792bbe041c012d015e0f9cdf7aa7a4d18766deff9a2735edc11437a10c0e9f265c48e7033f01161d5ca1babf5738b4c3df116d964712d2c577d1181a2a242ab4ada0b6cd45c1f36c27a7453575b33cdd7300a74dd585eab465795dccddd26", 0xcc2af3a15bcb65a6, 0x400c000, 0x0, 0xfffffffffffffcd1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x4, 0xff2f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@local, @local}, &(0x7f0000000080)=0xc) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0xa4) 23:08:20 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x112) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) unshare(0x8000400) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) 23:08:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000001bff4)) syz_genetlink_get_family_id$fou(0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000000)) 23:08:21 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x7b, &(0x7f00000000c0)={r10}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={r10, @in={{0x2, 0x4e23, @loopback}}, 0xfffffffa, 0x1f, 0x1, 0xffffffff, 0x6}, 0x98) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000d0605"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) r12 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xffff, 0xa0d03) write$UHID_INPUT(r12, &(0x7f0000000340)={0x8, "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", 0x1000}, 0x1006) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, &(0x7f0000000040)=""/131, &(0x7f0000000100)=0x83) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:08:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86010000000100000000fe8100000000000000f1ffffff0000aafe8000000000aa00020286000000000000000000000014e600ffffac141402000000004a70b4281a9b2b49831ab004a6cb97e303ce22758a594c392d4b1da11445c2b020", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 23:08:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e26000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0xffffffffffffffe3, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700)={0x3, 0x40000007fff, 0x80000001, 0x0, 0x2}, 0x14) shutdown(r2, 0x1) 23:08:21 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1, r2}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x88, "b1d39b958b93bc115027986fe8f17cc8f0138bbd14fc8aad1192b4e906c9a4d3147226385b40e3b50e0dff137506e8f2da0354938d65f1565426361ddcca54fe8e327a8610f004da2604b7b7fd75e89a9888c8b043623e4e5007886b5534b17e44e468694e6048c2a07dfb52accdee4e0674186e7d86d76b88953218d6d590c1844e3901c07efe19"}, &(0x7f00000001c0)=0xac) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x80000, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r4, &(0x7f0000000240)=""/125) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000002c0)=""/38) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x40, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000380)={0x0, {0x6, 0x1, 0x2, 0x2}}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000400)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x204, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='irlan0\x00', 0x0, 0x6, 0x9}) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000480), 0x4) fsetxattr$security_evm(r6, &(0x7f00000004c0)='security.evm\x00', &(0x7f0000000500)=@md5={0x1, "9f22bdd831d58f6d324175506d68baa7"}, 0x11, 0x3) r7 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x3c, &(0x7f0000000540)=[@in6={0xa, 0x4e22, 0x80000000, @local, 0x8d}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000600)={r8, 0xfdc5, 0x8000, 0x6, 0x5, 0x7}, &(0x7f0000000640)=0x14) r9 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_RM_MAP(r9, 0x4028641b, &(0x7f0000000680)={&(0x7f0000ffa000/0x3000)=nil, 0xfffffffffffffff8, 0x5, 0x2, &(0x7f0000ffc000/0x1000)=nil, 0x80000000}) r10 = syz_open_dev$dspn(&(0x7f00000006c0)='/dev/dsp#\x00', 0x82, 0x200000) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000700)={0x7, 0x0, [], {0x0, @bt={0x7, 0x1, 0x0, 0x1, 0x7f, 0x1, 0xffffffeb, 0x0, 0x0, 0x688e, 0x7ff, 0xd01, 0x2, 0x2, 0x30, 0x2}}}) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f00000007c0)=0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="47a454fca26bd0cc20b1c36de7c86ee6f0b21249a6", 0x15, 0x1, &(0x7f0000000840)={0xa, 0x4e23, 0x905, @mcast1, 0x1}, 0x1c) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000880)={0x200, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x108) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 23:08:21 executing program 0: fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='mand\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x75) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6b185fb9395d584b}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r2}]]}}}]}, 0x40}}, 0x0) [ 294.740847][T12171] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 294.752255][T12171] IPv6: sit1: Disabled Multicast RS 23:08:21 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x112) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) unshare(0x8000400) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) 23:08:21 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x57) getpeername(r0, &(0x7f0000000500)=@hci, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x6321, @mcast2, 0x7fff}, 0x1c, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000001580), 0x0, 0x3e827c97e7b89068}, 0x86960aec996a17d7) keyctl$chown(0x4, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x110000, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="05000000000000001c0012000c000100626f6e64000000000c000200080001000200e400cd6687fd79f060cd2e533f67df8add2f39cb0a22eac83619cd6ea895d0743f251a07b6f5d48c"], 0x3c}}, 0x0) [ 295.048560][T12180] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 295.140559][T12183] IPVS: ftp: loaded support on port[0] = 21 [ 295.248468][T12180] 8021q: adding VLAN 0 to HW filter on device bond1 23:08:22 executing program 0: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0xd102}) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x200011b9}], 0x1, 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getitimer(0x5, &(0x7f0000000280)) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x7b, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="85000000"], 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r8, 0x8, 0x6, 0x0, 0x7340, 0x8001}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r9, 0x3, 0x30}, &(0x7f0000000240)=0xc) r10 = gettid() tkill(r10, 0x1000000000016) [ 295.426973][T12183] chnl_net:caif_netlink_parms(): no params data found [ 295.514386][T12183] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.521718][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.530299][T12183] device bridge_slave_0 entered promiscuous mode [ 295.542737][T12183] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.550066][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.558923][T12183] device bridge_slave_1 entered promiscuous mode [ 295.608740][T12183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.629662][T12183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.663725][T12183] team0: Port device team_slave_0 added [ 295.674419][T12183] team0: Port device team_slave_1 added [ 295.758931][T12183] device hsr_slave_0 entered promiscuous mode 23:08:22 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x112) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) unshare(0x8000400) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) [ 295.803273][T12183] device hsr_slave_1 entered promiscuous mode [ 295.847125][T12183] debugfs: Directory 'hsr0' with parent '/' already present! [ 296.018602][T12183] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.025938][T12183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.033688][T12183] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.040903][T12183] bridge0: port 1(bridge_slave_0) entered forwarding state 23:08:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x115, 0x0, 0x0, 0xffffffffffffffe9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd7003b7e4ce4ac53}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5a, 0x0, 0xfffffffffffffdab) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @identifier="ae26e82909a5ab14032ac7598a86ae6a"}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x7b, &(0x7f00000000c0)={r8}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000080)={r8, @in={{0x2, 0x4e24, @local}}}, 0x84) [ 296.344346][ T2815] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.372141][ T2815] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.501496][T12183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.571704][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.580407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.604341][T12183] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.646434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.656255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.665219][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.672467][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.680943][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 23:08:23 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr="ffba4014000023d50700"}, 0x1c) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x1a5000, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10006, 0x0) [ 296.690441][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.699428][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.706670][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state 23:08:23 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x112) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) unshare(0x8000400) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) [ 296.855815][T12183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.866515][T12183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.013373][T12183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.035241][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.045276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.055185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.065770][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.075207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.084927][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.094456][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.103582][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.113258][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.122411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.131469][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.139194][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.375094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.384707][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.618272][T12237] QAT: Invalid ioctl [ 297.626685][T12237] QAT: Invalid ioctl [ 297.632600][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 297.632632][ T31] audit: type=1326 audit(1574809704.670:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12236 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d48a code=0x0 23:08:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000001c00000024ed18000c00010062726964676500001400020008002500420000000800260000000000"], 0x44}}, 0x0) 23:08:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x112) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) unshare(0x8000400) [ 297.846220][T12240] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 23:08:25 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./bus\x00', 0x6, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000240)={{r4, r5+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000280)) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000000)='syz0\x00') write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8}, 0xff10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000001000)) 23:08:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000040)={0x3, 0x1, 0xfffa}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001702000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000d685db026ea626269d8884e373fff6f2416e219a99531c5047b66bae74a929917bc326f61f05bb1b761a5dd6a28c6fb3f8bb7577c8b1b5d17dd6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) 23:08:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x112) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000040)) unshare(0x8000400) [ 298.403508][T12249] QAT: Invalid ioctl [ 298.409532][T12249] QAT: Invalid ioctl 23:08:25 executing program 0: exit(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x8, 0x7, 0x2, 0x4, 0x0, 0xfffa, 0x20, {0x0, @in={{0x2, 0x4e24, @rand_addr=0x1000}}, 0x6, 0x8, 0x3, 0xf8, 0x8}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x800, 0x3, [0x0, 0x4, 0xf97b]}, 0xe) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x4f) 23:08:25 executing program 2: r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000ff5000)='net/rt_cache\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f00006dbff8)=0x9, 0x0) 23:08:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) creat(&(0x7f0000000000)='./file0\x00', 0x112) unshare(0x8000400) 23:08:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000040)={0x10000, 0x80000000, 0xfffa}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5456, &(0x7f0000000000)) 23:08:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80440, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x99a) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x1021, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x14, 0x8d, @ipv6=@remote}]}, 0x28}}, 0x800) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 23:08:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 299.009791][T12276] QAT: Invalid ioctl [ 299.094964][T12276] QAT: Invalid ioctl 23:08:26 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0x3, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 23:08:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) unshare(0x8000400) 23:08:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) unshare(0x8000400) 23:08:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x300}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x4, 'f8'}]}}}}}}}}, 0x0) r1 = semget$private(0x0, 0x2, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/194) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') semctl$IPC_RMID(r1, 0x0, 0x0) 23:08:26 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f000000a000/0x4000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000180)={0x20000, 0x1ff, 0xa9fd, @local, 'netpci0\x00'}) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/@\xea~\ra!\x00', 0xb, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) listen(r2, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vcs\x00', 0x218040, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000002900)=""/170) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x28, &(0x7f0000000200)}, 0x10) sendmsg$inet(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0x8) ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x800, 0x0) writev(r5, &(0x7f00000007c0)=[{&(0x7f0000000280)="69efd1331fc493a5244947f894242b944f3f70e65192422433399ea5db86048752df774495eadf1ff742dbbd0b52ec4bd1b1c648d351e03435989c5c4dce", 0x3e}, {&(0x7f0000000380)="2a03528e47ab63aa01c42eb3b0e882f6b992ffaf6023f8782c4bd5aa52db227ca8365327972c8eef6f2177cdd0fb80e5a0ece901aa5f0001905879d93b600e4ddcfb6fe0de26d308d4153a9bf812ab8aef5be143ed43ff5323f937cc653374e76788baabe93692390ec08ef2a1344f7f16530ef913455e6afc72d12e685192c28d1ad45d8848d6bec06fb93904d08857e6811003aa1f5c2b5009c2a2ef275b6d06cb7d41ab51d374d8da9be21e8c1254a88fb88921af515ee98ee733e935f0d7f648dfd6c2b8c9e8331d3098a64f2a", 0xcf}, {&(0x7f0000000480)="126a3a00cb522a16963d4f42e07e74426b7d455ac4d9996ca6e03e3e22a024b5458831792bbbde0e412a06156466184530c7296c10b70ca5a2e2138341e7431ea1cb8db98686c613ecf733f3fea87c38071e8c6a34d2a905b0b9278fd6b9e865fea3ae17847fd9c9602db657b98bffc8693a4dfb3850618b09a53a87febda777bc447af191c29a432d56cb", 0x8b}, {&(0x7f00000002c0)="a0050db9f04d1eee0903c048becd4aa1f1c572786f55eb8c3e264e982e03929de7cfbcfcf5f3a4c3da04a5dda36ddc783971418f8dcc18cd7f05d9159929bc1e4d87d8659e335195ec6da0a31827729a65840f37d21afd0dd7", 0x59}, {&(0x7f0000000540)="cd99cfc3a83493d84a13128849c27def0c80d4cc1f957a89b17149687041ea1cef45a487d6b8f6047e13bbea26be5a30026652d36b8e1a121549f07c851e5729608468c554c485cef89c513e443792a04b6e2a7758fde926c2550061d179c6091351ec31b8773e665f32decfcdbfa71022c7433e19628a9961b09e6e714fe137beafe1b5302dfbe983cd0ec65b97d5b31a01286a52479cba1a8130d0ecbed9d8449b5628c1f90504f0de9c9386c8f7de3e4e00f4eb9fb46ddce9c54b3adeae1223e149f2d744ed0aa4fd455aaeb5f31f94aee9328ad1d0665bf6f4351c53dee13eb1bbb874a8521fb660d4ece2baa1d22845b4ab7a2eca", 0xf7}, {&(0x7f0000000640)="87748e233a06d68c0ed9232030f86d64530bcd6660e72b1c18e616b62da61ea97d0ffb1af1e5419f4261e7f3f203d1872f09d7297beeec789d8b09e7bba023db3e0cf4e8604a575ed4589ee8d0c664e8bec857210175b573d810540d4da77d49fa3acc2c6b7cd63b4521bf37d4abdf8b3d347f02116c583dc0e2bccae278662a8509e563fcf6520246b88085e0d0f3258a37da172f1f75e04f066b76b62d", 0x9e}, {&(0x7f0000000700)="edd59dc2dbc97f6741b0820ec5272a393c758fa0ec5b86829a4762c592be766462a673c02ad13df77c2df3be40d711bc6e50ea98d5a2fa9b3158d6e89c21297d1f230fe3aa764e3ae8fbf30b1e62934656c126f918683c6f622f30eccc1048236f3010106cdc639e54b087e8bb13c78c91774e6bf9d3202dff9f96999f4e59f092321cff8eebbdba", 0x88}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="6d127958349d6b8b4d41aecd90f8b2146a6b1f21c7adca1af9c4397f681abc5f51456dfdc182ba2cc330d55b8836bdbf2fe045c2659649b5324119386a8b03b41b92512fd440262c580a620c2f0b7383f11664278f687dac103adab0a8dcd911a9e5cdfce624c2c5f6a1892de1ce3811ecfd475ea7f9362d70c656ee01c50f589813bed51b9509e39a5b343aae3ecb85afc5fc2bd74db3b3f78176905f8d987265a6181bbed653663364d71a4c4ff5f23390e4d96d532a5f4678c1d69a94789a361f6a06ef0c9ff55ca44b6be29255cdd17efa76b3c85d04a7a72760027ff0914b858698e2aceb3346df7ec25bc80812ba2e605465662bececfbc8c114b784d13663b9cf013828a9005c2ca92105d281fe05b7c5b5076d7a7678ea3e33fa9402e58204abf75c381b838d1067279fd37b8fa5de875eb2499c3a48311cd9fc731552aa1891470c6095eedaec9506936483fff8dcadfa9ed8cf3e913ebb9c083b10c298db1237882a4f3f4573184120e715f0a0a11ed78e7f261a3641a12339e44919927411520289559683c23416b22fa668e2a8ff5a43900bc0b1629e35ad2b250b1acba59d0f0b2a93deaccea245e563452ba538b7957ac2c02b12c6b1ca29054f5b8d35971888ee39db59120e98b7804c3892939727c19777a2c0fb0f7cc6e87824ad13e5397112e3a695708d2117d20a958e3f267848e100b5182524b1583c16c0775143b80eaab5eb0cb2f5ab254f4ce507e00f05ed2aa83a5d1a83e78f78e21c98b48313d558c3a3e49d851307174a70ecf59adf8c7436893957cc9d5c5cd61315a48bea1186fa1e6eafd1a64c8edb1b4f869fe374b3c128967cf518bcd2957950114b65292611ec5ecfb44f1ca57ce1b9a2c002a3231378c5dc33fd7f395a5e9e63a092ba4357ef92cad7e1f813295e54d9a89bb8bb97b0bb2cbf19664b39b9117d3f8070e81622be92a9a8301c3c70415b0e1abb1c646d8f55aa7b568e4812288c5d7a5a71644959f494eadb160296ba352fcd46f9b590c95bd71ef050940b0ead29a10b5cf2abdd6e3adb0275ae7550846099ec69945a36f5fe25937c7823b04d157ade7b46d8d064751aa38cccfb99e5a56e18542377c2a6476e455b6fb7ecf7edaffb4acff3a540acd9b561f7dc924b7ce1187c00ea03e71d76a5529cd008cfa18613d353b54b9520d4b0168b37677a0bb6d7fd82c3df8366557783f195eb51bfc78d750fedd2b882c89abbd74c3f0618b9e0a09efb2b92ca48520227808db0fef81d26b124dfec7b06790ede38e5fc16ea2ef48c890c6bc64bf74bbe42ef9be60831a6968345c2c0249c664316670c1b1850ae7a55de5a9ae5b8f2b4178279e4386afa62d886d0759291472fea30001adda075a7a5eb7d2d7933f5a977a80c38b823dc7c77c4df0e07c558333c0a68f1b9accb0d5549121b65010e8f7a1bee936cc380474028d93be488d8a81e5c68e2903d9ea7599e822e9f1ff3e85a3030fd2d5d512f7d89d13effef9293014b841eae4672ed8feeb5bd72c22e85a4f07884edf4fb22955b90083448b0e72a0f2e47ea6813896bdb70467911c6d60289ab3319608de98e75d52e8ba5c469f976fa57acf135af6d0756a011407cd77001c21aed11a3438399b0a6d15f9c72147627908b6c54afea7bac89d8635021f4dd70e627702912fa38de1113d9d2660ec98f7f5abbf3cf2dff3bda7cf731e09427b272453e619ad82492aab78b35d46eba437b885c7d7327b4b9cef4cbeca6cd4ed192d420f864396fc35e268d5d53fd5050a8f074ba8c38a484f97452fe1245b949e961a2c3eecbe7f3ba4c813d7ed0d62a094f8828eed696d3559173d1ebd0aab9e23c01a1e8004d336c0ab6218aa2905ffd432613e1f9d861ef2f50839da2af7525290a391ecafd2891bfe771a3d629511271578856598b59b59bb0c0d3987724a92665afec59d0508aea05dec170e72e1a4b6e8404ab34bd4373e6147c55f063aa52f7c12955adb430557237596abb7da4326a128d476ab6274c24fc6c7ae318aea35fc009fb7f9c8139efee87896ee927be24f2ecf27e9e348997cb68526088560cd0cbe0a2e582037537cf7e1f9b406c53e5dc5cc56beedafdb9b2b5611fb83b99ae0da1531330c04703aa248cca65bbc1c8ac8171a5360e55724c9f43983759da970a3dd2fa64a995db96157952d56239101c18cc2682d9733f36550149ba627349ea0174a70b65e6d9a3bc1bd0c49783b1a847d47d7baca0ff5f9933afc8182020a28aa6d8e668b48884bfa70ba02fd2f5188f68dd198d92cd77ebbfc4bdbdd6f19ec97e32c63e3e7458de2f015ab4e6c50d088adbffefa9deee38f2a0e55c789c9e018e7c73bc32057a15c7d90f12f1c5e450170b6a26f384f8dc49e3406b982e8ca8e8d773ea6ffc0b267ba92b0216b7e82be46cc6159200c6f11135a202874b0e8162c7ac29d94d00c4de4db73548427f38e8f9859444f10e3f7fe2b52e7ef6295ff67611bf3a992cc72b89af44a8ed5ef81dff9d082498259e02fdb18c2cebdba7ba4fb749e728d85b68d2189115cd67383d0dd5e0a0c7bb2b3d2cc41aa09baaf53c5ed13a64a814a40f44c442bff0bc12b52e760030d280700bed6298b87c16e2b698dba239fd535cea8457b98cdbacdb2f2bd25bbbb39ac979f1f402d195e3e4775b97660fd04c47c1e9cd0c46fedf755f518758b2105f2988e9e496b688ae0d56bd4809a5cb6891c8529e29828b7e97daef6ba20db5a31cc53cff391c2ae3af4e409c2a0e6428ce059af5b1c22084e633428d0f9b2fcfa49ea0525268c6a342fc35f6b11a71c236d9404fed710c4fb9b61f0a2010eeca56b541f70a2c096bd5e59c29db067c4b79fbfd86e798908470caad9d5de43606a6ab433753a468f75a77b981d6f7121faf0deb246fb11fd8cd25588341e1b2902bbbf1282561e0ad091dc0114a187046dac67d9818007cf76f612b39cef4175e75c4c8805df1cd920f25e6efbe04dbf70c3b70a9246164fe8888eda63114859d97f521dd325197197ed593d5683651c8141c4e532e12eeadaf0bfa340ba645264d917c4c415630ff541d6ab76e3255cc7bf94d8167485ecf838bd269e80904649c40916abe4925152570c157202a91754a27666cd12e35ba4b8c68ce2ef7854fe793c258cca361ea0319fa81cc83f40dffa5f855391875cf2d1efb25a08f09a9b4d6be9cc78a100edd3629dc3d268a039130c553e8cf105a83e050c31c5fff59945c3b691f1625386d483d970c5af05d824fd6464e0a8c94dcc63dce14d7bd0431e4afeeacbabfa13a94d2825d8fe1776f7872267167e1199602a354553c26afc6bd7cac160e29dceee673eb746820de89ff740d284b50c5b00fc3ee13562979fa09ecfcd60f3c0cb8d73f378e59ede0066a0db2f3ffb8cf578cab74762ff27d0541e169f3c9bde4ea0edc3498b3baea359256bf0b321242b583936be840b2c6d8695ce639e35f41861b6774a3e65d614e20984af79af6014451431d12d3c55bee3c1c683d66121931a724cfdeff44cd11d061cf9ecb82d74954a15233dde31e96e9898f0bc1c78325eb6605cb6cf89a720774e81f5208a8e8cda2cbe9f2c9a7c9ce2ffe7013b2bfa9c47d7ad28187ce5f2f52ec2c409a0c6cafd64c333c2994fb23a229ae14aecf9011bdeee98599f3dd71349c60b80a79575a9ff2924b59382cb06f7c527ad3b7ff322c7e5bd287a0aac3446445a79399a69b83d1cfaa6ec689cd36c7b19043ab3c69909ae62676d987e62e5baef5e80a32115b801841ea189cf7933214d4adc2ec179df58ce676cd4483daf96970c12d461547ab28b01130aefe12b4b1d8c422689b72526fc337be01481281479ee2e7c973c198882984f4566ffdca9c8eb374d6d826ab54649bda773d904a7b2c14c2252cdb2f752325915e8d1ca225cfcad7f4b40c0f8489aa5e17e36af1d76a914a0ef8554f0fd0d194db0371333145682e18aa24c2f67a6814ce2f3a002da6cefe4c1193ac7258d06f6122881e908e2a9d256731a2d0284a293af478db4124e3dcee8b375e7ef22e4eca9b0dfb2670c6e8af8037dc181d4fea68f104584c63d457984ff649de5a2b1cfde62d637a6ae000e1e433902bbf08f016601485d23e241f727a38a571a32aa7bd36d4da156e96239f0493b80ff9b859900e1d049af6ed43c58f6bf331b3963c8ac02ff108924daf13b900bc13498e9b2f220b3bff029d75322c8a85a8993d32c8ed44e89084aa9abf09aa50f2750a8a5e6422f0c9545d0a00814c9cdb46e1a11b58a683143811fed0016074e32f0e5b24b44d28d43812805a881ff450375082c774caa3d537ab1765756cf9366c3120b4734e68cd2846ad7f5bc73795bcd65650eb9878673fc000a570e171abb625e23fc2f126e9126574f2c7b96580b446e012c483849d08a709c7549102ca768da1553f842d4e2f18afb5524c20cfe1c418b997f0756cfe237d1c15c9c8ca66288a4c4fd359a315774cb0b73167cc55530413b88ac29a800db5312f69212a0b970719f1d335931fe7ee7d3ef626036832e50a008b6f7e6eadec75f20ec6c5b95340ffce2575989b2bf34a978acf668210186965e9bccb42addadec3c670ab1f72c418f749f2de798fddab1a89c291dc8da681f19737c476174a219e77d98351132624f5510ff4d565571318ad8924f55fbc593668fe00995b7b1cccda8fb788f552cadaf51142b71e758a270ef422ba618890b23eeaf7819c1d86a6071c9c31964d94e03513a57b02e52c81a05695d14884705c6516f6b4ea5928fed63eef2a135ec47db65bef2e53b6011da4a0d29b0a68a5c773b672b75e3159d914439b37f59247f3981d1c3afc6f8fafc13b209bd58aadd46e63e7ceb39db3e15a028f167e8ef88c94cbe77e5cfc41688ee714595962a327edf9a55908976eb51b0e4352539ad70f59d7d353c6453c6b3bed21f1d550272c329fe0789b0dd87e27b68e6f7326797debbcfbf0621f5417683713d5c72ffaedd15f60759c2ee13fd299bc4a351eb59ef5312db2badcda8d91a98c198d9ee654e759a24185791113d4c0d2b3918fdf647168009e0e8da7a6528328f5babe400fc28696ec52dd7e3577006a2d45bfedb2a2073f548b9d9ed342e2627dd2b1a53a644a4cb77ad2e68cf68486a32c6c39bd84394e083544e148f226753facdad38e218b929b45b82c6e16db0c04bcbfdcf42f41deb864dd8d2111aaff718e467ddf6c005ddc3ba2e070216df2457e154c9efb58764c42a5646d47dab6d6f791527c1131d48e882451d26b585ea2faaea127543c29bd08bde9bbd5ebf0076a0c32c884c5d6f6d0e25b063406534a7c22a0fa86d5b557c54cc409e5f40be27387de0340853c09a6934fbe399242abdde021cd22647f4863196dd765d602ee30401e400e74a0da9f2fcee9545762e05a8d6d0cc97ff5cd35d0109be33b42e3ccfbf4c9213dabae79ed506d16fda29ab9d2b58902a1ff25cafdf708f809dcf8d3c6b184ea677e569ead3b16acc53376a3f7a7f74a5920b20e8deb93161b79e66085a3a2bc85d3a9845111bcd7aaae6b9177b5c8a06343b110d0df3a6339966e8d4c711adf27c27ad5ea83943daddb95bf2326b3f3117c60c1672381c7b63e3acaee72b1b4f10d60a66ba43aac3605c935bb0f08d8006027448941f5723ef4690a9f7615ddc6f487ee6297fdfe7123e69ab200cbe6a000d36560921d4254a229d429f60f5d6ea468f4792d1f0b750a8a706c1373cf27049805e7fcdda64deb9c0d80", 0x1000}], 0x9) ioctl$PPPIOCGFLAGS1(r8, 0x8004745a, &(0x7f00000001c0)) [ 299.577561][T12293] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 299.644350][T12293] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 23:08:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) unshare(0x8000400) 23:08:26 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e28, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept$inet(r5, 0x0, &(0x7f0000000240)) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000740)=0x7f, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x7b, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYBLOB="8b7b9d6c"], 0x8) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000280)={0x4, 0x3, 0x0, 0x7}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x0, 0x246bd65651dbb537, 0x7cd0, 0x10000, 0x0, 0x9, 0x6eb0, r9}, &(0x7f0000000140)=0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f0000000680)={0x3, 0x1, 0x5, 0x4}, 0x8) sendmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x2400ffe0) r13 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r13, &(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={'\x00', 0x1, 0x2e}, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000380)="2179ae96d65191eec9c350d464d1c3260b87cfe350b582886c11b87f5dcd3b5b99e18e86088c619321135648260052016f75241b8aaccca40962256b5c6d667fcaf4a1ded7256d32dc50c64f99bcfe4e707fcd1e84f58d5141ac1910f6730b8ab4c70bcb0513c560eabcfe02166cd43b0de2b3d0c759240bb1a68db6e76fc85bbc01d37964b8", 0x86, r13) r14 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="ea750b56919cb09e5e0a241ee20de4517f2e5977a77870b5dc87eabd7b6babf3080160779f5fd1b09b9c9ca6482c960b0b9a2cd3dadb7651d23d0ae22ff93f35128049437fe68baa3085d9622e2182cd505596ec86c06ef52397b878fd805e268b2a0a36640fb1f9a40f0a305bdeae4334d03f448b1aa144df0ec37c732a722807be75aaaafba9360faa2283f9bf85609825d988b535b97748793f28b933bdde7c2bd7c2e48f9c49b4b0df1b88bbb69c2b5b8dd78689321c59caf45c0bb1525173b53d002ea7163a19c3d7fc67055fd54f2f16e01ede94732db74cb684a4c221bf4322", 0xe3, 0xfffffffffffffffe) r15 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="1d1f73babc5c4b075a9deea7026a0f8eaa7a7846bb82b02c56", 0x19, 0xfffffffffffffffd) r16 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)="01", 0x1, 0xfffffffffffffffe) r17 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r16, r17, r17}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000340)={'crct10dif\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000840)={r16, r14, r15}, &(0x7f0000000780)=""/185, 0xb9, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f00000006c0)={'dummy0\x00'}) sendmsg$inet6(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740)}, 0x0) 23:08:26 executing program 2: r0 = socket(0x4, 0x3, 0x40) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) r2 = getuid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r5 = dup2(r4, r4) getsockopt$sock_int(r5, 0x1, 0x21, &(0x7f00000001c0), &(0x7f00000007c0)=0x4) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000380)=0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef3, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r7, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={r6, 0x0, r8}, 0xc) r9 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r12 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r12, 0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)='mime_typecgroup}-\xb6&]/vboxnet0-&lo^\x00'}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r16, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") r17 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r18 = dup2(r17, r17) getsockopt$sock_int(r18, 0x1, 0x21, &(0x7f00000001c0), &(0x7f00000007c0)=0x4) ioctl$TIOCGPGRP(r18, 0x540f, &(0x7f0000000380)=0x0) r20 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef3, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r20, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000140)={r19, 0x0, r21}, 0xc) r22 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fuse\x00', 0x2, 0x0) r23 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r24 = ioctl$KVM_CREATE_VM(r23, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r24, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r24, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)="958e8f05573bcd66db2e7aff14221e7b4d1874bdc676a02bae46645d8bfe3fc9f632a8f419054e5a6aa603abf6eb03fa42a588b397612275b1a4084a30946a9ba5e071f857d17f43b028e793a656bb7f", 0x50}, {&(0x7f00000001c0)="84a8a8fde3b22c18916dcb447d3b7546d0b48a349a203e21c8f267d4bbe60e58e775f9c14b011cc2e824a4a3b68cbc56b9683604f0e64bafa85c4cf185c744c98da474d7b09462bbd0d43deed898497be1cf112ac0c55bd27b40756101bedda017332b5d541e3de848b966c125d4a11d8c3e4be8d5b14aec82e2ec67", 0x7c}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="0000000035000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r15, @ANYRES32=r21, @ANYBLOB="000100002107000000000000000000000000000000be3d56f14c625cb0b84eff0b77f12be77dcda27b630fa43a6267c2962367581285ead17bb061429d7928287766bef05c19a588085f88867de762bc9b7bf7a5634578df338dedbdd1276860f48fe9fc4095331c51f7bf5f44947c50f66f0d1f4349a35bd94ae5cbc46760fb52ab71b68ab175f90057", @ANYRES32=r22, @ANYRES32=r24, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x4000}, 0x40001) r25 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r25, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r25, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r25, &(0x7f0000000080)={0xa, 0x0, 0x380000, @mcast1, 0x4}, 0x1c) sendmmsg$alg(r25, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29}], 0x3}], 0x1, 0x0) 23:08:27 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="45f333f8f84eebbf687d0c44f1f2e788a43f3a6666f571a44900950cb0086cf014c257a114d05c2d2998c8b7915df6a6bbddd16dd3a7eedb8d8bc689d160dc02226d6b1d79784a7f9fdb3e4f0086e6da6dd2c30a1c8f9ec7c993c473847ee209dbe936ed01987578ccc004b6d82ecb0938e25f66cdd39f456f1bf5b400fb5dddc4a21e4d762cebdf86ae733c4ec0ba75508253eefb24e8f2920ddc8920bbb3ae5897a2288735a99fdbf1bee8d5e9069700ce83d78fa8c60a00d78604945e849d644ead4a5605231a44bce4233f024c46"]) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='s{st-\x8d\x15I\xfd\x06H\xb7_acl_a\x00\x80\x00\x00s\x00)\x1c\xba\x8cz\xab\xdep\xaf\xd9\xaa\x92F\x1b\x11\f}\x0e\xbf\xd3o\xd7\x98I\xf4\x8c\xf4\xe2^\xf6\x13/\x92\r2\x1a\xb3!\t\x9dapXf\x83!_\rR\x84u\x1b\x11\'o\xd7=\xb8]i\x17\x8b\xfd.U\xe1\f0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:27 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x220) socket$inet_udp(0x2, 0x2, 0x0) 23:08:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0x1}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0xe3dc, @local, 0xff}, @in6={0xa, 0x4e22, 0xf1b, @dev={0xfe, 0x80, [], 0x10}, 0x1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) getdents(r3, &(0x7f00000004c0)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) close(r6) socket$netlink(0x10, 0x3, 0x200000000009) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) 23:08:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x50811) 23:08:27 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="180100003300190100000000000000000400000004010000140000000bc904f7ba9959321f117bbf3752965b14000900ff0200000000000000000000000000010400000008000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="de149d"], 0x118}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x2cf, 0x240100) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000002c0)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000240)={0x6}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4e21, 0x8, 0x4e24, 0x2, 0x2, 0x80, 0x40, 0x3c, 0x0, r5}, {0x4, 0x4, 0x3, 0x7, 0x2, 0x200, 0x29e0, 0xfffffffffffffffe}, {0x9, 0x7, 0x4, 0x80000001}, 0x1, 0x0, 0x0, 0x1, 0x5, 0x2}, {{@in=@local, 0x4d4, 0x2b}, 0xc74e6a182f0481da, @in=@rand_addr=0x6, 0x3503, 0x3, 0x1, 0x2, 0x8, 0x4, 0x1f}}, 0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, &(0x7f0000000280)={0xe76e342eea5cae36}) ioctl$TUNSETOWNER(r1, 0x400454cc, r5) 23:08:27 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:27 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@loopback, @ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c20082}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x100) r3 = dup(r2) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000080)=0xffff) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="4e9fd8f746bbca6f2ef6514fd8e29b165b56ecf8bd56484ec1ff459058299062a2327cc0e75aff9e3e18e0b46b218449c47d46a6d3734388b19609002544f1106123dc2c70954783295b75c782294da7dc3e61241fc546b4d5a298e7b1786113c49462faef14590a5c252df5133667652d5345cb179545aaaf2a2429e83c5c53e6a68200caeb458b341dea974972421554ef315584b35a3dee04c9a1ffac25cb5e8a67cbd1f97fdf0ddeea1aff538f872901aa5d3945a642e9057d34ac0ba8c2afed29d9e0108b3f0364365469037411c64144160c321c3694c15cfe3d33d4fe01edb7847bd14717af7d51b61834b53631a3d36e376125e26b7f87d0a0d826a7") ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x65}]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/icmp\x00') ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000004c0)={0x3, &(0x7f0000000200)=[{0x7, 0x0, 0x24, 0xfffffff9}, {0x94, 0x5, 0x2, 0x9}, {0x1ff, 0x80, 0x0, 0x8}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000100)) [ 300.928903][T12356] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. 23:08:28 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00869a922dc85541086a9df9dd60f500000030060000000000000000000000000000000000fe800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c002000090780000051a00"/36], 0x0) [ 301.069652][T12356] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. 23:08:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:28 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x400001) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0xfffffffd, 0x4, 0x8}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x9, 0x20, 0x54, 0x3}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r1, 0x8}, 0x8) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'tunl0\x00', {0x2, 0x4e23, @loopback}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0xffff, 0x4, 0x0, 0x0, @adapter={0xeb4f34c, 0x8, 0xb, 0x8000, 0x9}}]}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000240)={0x8b, 0x4, [0x3ff]}) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x5a, 'io'}, {0x2d, 'rdma'}]}, 0xa) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x2, 0x0) read(r4, &(0x7f0000000300)=""/193, 0xc1) accept4$unix(r3, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x800) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x44540, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000500)={0x0, 0x1, {0x1d, 0xa, 0x1, 0xc, 0x6, 0x80000000, 0x5, 0x16d, 0xf7d2f4878dc32ee0}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000540)="b845b12270797fb4c561f247a0c9bb7b2ae963f5a8b4ae5603e23817e40deda52beae02f711ee51f8d15fabddc35cc07e9d344efad618981a2db3369c0ad7b4764", 0x41) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000005c0)=""/250) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000006c0)={0x0, 0x2, 0xc000000000000000}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000780)={0xffffffffffffffff}, 0x13f, 0x54d2fad3f38d1d80}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000800)={0x16, 0x98, 0xfa00, {&(0x7f0000000740), 0x1, r8, 0x0, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) r9 = syz_open_dev$media(&(0x7f00000008c0)='/dev/media#\x00', 0x0, 0x402000) ioctl$DRM_IOCTL_CONTROL(r9, 0x40086414, &(0x7f0000000900)={0x1, 0x7f}) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000940)='/dev/btrfs-control\x00', 0x4841, 0x0) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000980)=""/195) r11 = socket$inet6(0xa, 0xa, 0xf9) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f0000000a80)=0xedf, 0x4) 23:08:28 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x58, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, [{0x14, 0x1, [@IFLA_VF_RATE={0x10}]}]}]}, 0x58}}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000000c0)={0xb9, &(0x7f0000000180)=""/185}) 23:08:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xf}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='lo\x00') 23:08:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) unshare(0x2a000400) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)='mime_typecgroup}-\xb6&]/vboxnet0-&lo^\x00', 0x0}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r4, 0x0, 0xf, &(0x7f00000001c0)='bridge_slave_0\x00', r2}, 0x30) r5 = syz_open_procfs(r1, &(0x7f0000000080)='net/rt6_stats\x00') write$char_usb(r5, &(0x7f0000000100)="b15735ce796235d39109438fea086504e94015d37157274ac4f7edc96504fde338c61c327a0723c526b84fb9dec8c217d0e86697008c90eab2a8b600b4503881a8ca7234e7789c92ec4f2e0b92897fad5b3985e5671cb7fa5ef9d0235e172d4f6ba734427912bfdceab542273fe9cf7712609a109505b140b251731a76a712f8d494e097426f1438c51208be5c8dc20b73a47b0871018863", 0x98) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x8000008000080003, 0x5) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x13, 0x100, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, r9}}, 0x20}}, 0x0) 23:08:28 executing program 0: socketpair$unix(0x1, 0xc, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x5d, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe0200000001080008000c000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x18a, 0x0, 0x2e9}, 0x0) 23:08:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:28 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r1 = dup(r0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000004c0)=""/200, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x8, 0x101, 0x4, {0x5, 0xfffffffd, 0x52, 0xffff}}) ioprio_set$pid(0x1, r2, 0xd81) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) clock_gettime(0x6, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x87ff7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000000}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) pidfd_send_signal(r6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0xe2ee}}, 0x0, 0x1, 0x0, "989df493c69d502cddc7e3cc65253f03ac5954e3d0613817fcaa8308c4649deaa29733497e90c14661e43216ab7f865a6f05f8470fedaba2b3e62e38a2a3c099b8d2ca8498ef6705f060d497f3ce55fc"}, 0xd8) 23:08:28 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0, 0xfffffffffffffdbd}], 0x1bc}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xd444, 0x10000) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x1, @local, 'vxcan1\x00'}}) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 301.848382][T12393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:08:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:29 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)='mime_typecgroup}-\xb6&]/vboxnet0-&lo^\x00'}, 0x30) fcntl$lock(r3, 0x0, &(0x7f0000000280)={0x2, 0x4, 0x2, 0x9, r4}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x209880, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000200)=0x101) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x20502, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="9a00000000b100660f001deb6f000065260f79b900000080640fc71ab8f5ffffffbaffffffff0f3066b893000f070f01c8b8df000000c744240000000000c744240202000000c7442406000000000f011c240f300f0fd4aec4e27d18c70f06b8000000800f23d00f21f8352000000a0f23f8000000000f10c744240000000000c744240200000000c7c2a406000000000f011424", 0x94}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000100)={{0x1, 0x0, @identifier="c602ac349edcb89a9439be7103efcff5"}}) [ 302.210714][T12402] IPVS: ftp: loaded support on port[0] = 21 23:08:29 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 302.653429][T12402] chnl_net:caif_netlink_parms(): no params data found [ 302.773434][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.780658][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.789548][T12402] device bridge_slave_0 entered promiscuous mode [ 302.800102][T12402] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.807414][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.816329][T12402] device bridge_slave_1 entered promiscuous mode [ 302.848945][T12402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.862150][T12402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.896271][T12402] team0: Port device team_slave_0 added [ 302.906531][T12402] team0: Port device team_slave_1 added [ 302.978721][T12402] device hsr_slave_0 entered promiscuous mode [ 303.014558][T12402] device hsr_slave_1 entered promiscuous mode [ 303.053870][T12402] debugfs: Directory 'hsr0' with parent '/' already present! [ 303.460990][T12402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.516889][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.525996][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.548044][T12402] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.589409][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.599453][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.608599][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.615840][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.721459][T12402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.732541][T12402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.755733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.764965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.774491][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.783547][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.790823][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.799371][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.809401][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.819502][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.829496][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.839085][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.849160][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.858841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.868071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.877862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.887060][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.032402][T12402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.158053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.167263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.175820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.184215][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 23:08:32 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000340)={0xffffff9c, {{0xa, 0x4e21, 0x8, @ipv4={[], [], @rand_addr=0x80000001}, 0x1000}}, {{0xa, 0x4e24, 0x7ff, @loopback, 0x2}}}, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) io_submit(r3, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) 23:08:32 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r1 = dup(r0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000004c0)=""/200, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x8, 0x101, 0x4, {0x5, 0xfffffffd, 0x52, 0xffff}}) ioprio_set$pid(0x1, r2, 0xd81) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) clock_gettime(0x6, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x87ff7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000000}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) pidfd_send_signal(r6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0xe2ee}}, 0x0, 0x1, 0x0, "989df493c69d502cddc7e3cc65253f03ac5954e3d0613817fcaa8308c4649deaa29733497e90c14661e43216ab7f865a6f05f8470fedaba2b3e62e38a2a3c099b8d2ca8498ef6705f060d497f3ce55fc"}, 0xd8) 23:08:32 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x60000810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000040)={0x0, 0xffb, 0xaf8e791f1b36ea63, 0x80, &(0x7f0000ffd000/0x2000)=nil, 0x8}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000000080)=0x2) readv(r6, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000640)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xc4\x04\x00\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xfb\xff\xff\xff!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r8\xc3') r10 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') sendfile(r9, r10, &(0x7f0000000140)=0x3, 0x8) 23:08:32 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0xffffffffffffffff, 0x107) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x10, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 23:08:32 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000d, 0x2) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0xfe4e, 0x200407ff, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) timer_create(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000600)='veth1\x00', 0x2e4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4) sendto(r3, &(0x7f0000000280)="b1193ec96f8d4d5d588a0f24f3575c5223d14a75e09b5f701b6cf69c808b2515669690400850a90424e0a1f1f3d1ce564b83e57f8c4c00000000000000000051810000000084371d5c5155d77c38bd2e73", 0xff0b, 0x40, 0x0, 0x278) close(r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000600)='veth1\x00', 0x3aa) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000000)=0x4, 0x4) sendto(r2, &(0x7f0000000240)="b1193ec96f8d4d5d588a0f24f357a72423d1422c87b49c80a0ed1533420424e0a1f183e57f8c4c542fcb4157cbd23f6686980b320bcf", 0xfffffffffffffe86, 0x40, 0x0, 0x0) close(r2) accept$inet(r2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) times(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) fanotify_init(0xb, 0x400) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x1) getsockopt(r4, 0xff, 0x0, 0x0, 0xffffffffffffffff) accept4$unix(r4, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r1, r5, 0x0, 0x80000003) 23:08:32 executing program 0: userfaultfd(0x80800) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x100000000) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x86ddffff, @rand_addr="219687a3e4d191e99a9b2f0c7278fe1f", @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff87, 0x0, 0x0, 0x0, [0x7], {0x9, 0x6, '\x00', 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [@hopopts={0xe}]}}}}}}}, 0x0) 23:08:32 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:32 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5875, 0x4a0000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000140)={0x0, 0x8001}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x25dfdbff, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x11, @ipv6=@ipv4={[], [], @empty}}]}, 0x1c2}}, 0x0) 23:08:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=""/30, 0x1e}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:33 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:33 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) pselect6(0x40, &(0x7f0000000040)={0x9, 0x2, 0x8001, 0x4, 0xffffffff, 0x2, 0x800, 0x80000001}, &(0x7f0000000080)={0x3, 0x0, 0x80000000, 0x438, 0x9, 0xd, 0x0, 0x401}, &(0x7f00000000c0)={0x4, 0xfffffffffffffffe, 0x80, 0x6, 0x4, 0x2000000000, 0x7, 0x3}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={0x800}, 0x8}) setsockopt$inet_mreq(r0, 0x0, 0x21, &(0x7f0000000000)={@loopback, @initdev}, 0x8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f00000001c0)={0x9d3ad86152a0e089, 0x1}) 23:08:33 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="e83ebacd29144a7de946b6a489a77da6"}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="a6", 0x1}], 0x1}, 0x40) 23:08:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r9, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) sendfile(r7, r7, &(0x7f0000000240), 0xfec) fcntl$setsig(r8, 0xa, 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 23:08:33 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:33 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYPTR], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:08:33 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:33 executing program 2: setrlimit(0x2, &(0x7f0000000040)={0x80000000, 0x100000000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x101}, 0x68) r0 = inotify_init1(0x800) lseek(r0, 0x5, 0x1) r1 = socket(0x10, 0x800000000000802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0xa200, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'bridge_slave_0\x00', 0x80}) write(r1, &(0x7f0000000480)="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", 0xfc) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x408000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000180)=0x9, 0x8) 23:08:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=""/30, 0x1e}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:33 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r9, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) sendfile(r7, r7, &(0x7f0000000240), 0xfec) fcntl$setsig(r8, 0xa, 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) [ 306.907873][T12521] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.999016][T12521] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. 23:08:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93a57a928ff8cbffffbb8dfec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:08:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r9, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) sendfile(r7, r7, &(0x7f0000000240), 0xfec) fcntl$setsig(r8, 0xa, 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 23:08:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 307.703042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 307.709376][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 307.715819][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 307.721977][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:08:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=""/30, 0x1e}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r9, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) sendfile(r7, r7, &(0x7f0000000240), 0xfec) fcntl$setsig(r8, 0xa, 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 23:08:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x15, @u64}, @typed={0xc, 0x8, @u64}]}, 0x2c}}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0xfffffffffffffcd1, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4040000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x918a6bbb2157d180}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x40004) 23:08:35 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 308.139088][T12561] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 308.147805][T12561] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 23:08:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps_rollup\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x40004) 23:08:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r9, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) sendfile(r7, r7, &(0x7f0000000240), 0xfec) fcntl$setsig(r8, 0xa, 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) 23:08:35 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:35 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000040)="1c5347c06bb3bb40eeb341b984f251c4152a96a0b187e8f1442ca8fb2dd785762d46f4db52f7c2734e4f489fa2a09ff8f55c88025106073533f1a2b8118feb5f10628bbf3d63e4f40d0e6c3cb1c4820f068806add7cdaa78009dc130eafe20b93b37ce752145e4da0942206acd88b166143fe3ca0ad31b8abaebb701dd829df1fb353bce33f42b1c4493b07b22", 0x8d) sendmmsg$inet6(r0, &(0x7f0000007a00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000100)="87", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr="5fb9a04b3ad9c771b47e60b4aa75d83c", 0x400}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000001780)='5', 0x1}], 0x1}}], 0x2, 0x4004040) 23:08:35 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:35 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x541000, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x80, 0x4) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/85, 0x55}, {&(0x7f00000003c0)=""/218, 0xda}], 0x5, &(0x7f0000000540)=""/4096, 0x1000}, 0x201) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000001580)={'netpci0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r2 = open$dir(&(0x7f00000015c0)='./file0\x00', 0x8000, 0x4e) fstat(r2, &(0x7f0000001600)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)={0x0, r0, 0xb}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000016c0)=0x1420, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001700)={0x0, @in={{0x2, 0x4e22, @local}}, 0x200, 0x4, 0xe39e, 0x800, 0xffff8000}, &(0x7f00000017c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001800)={r3, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f00000018c0)=0x84) rename(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)='./file0\x00') r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001980)='/dev/zero\x00', 0x20000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x5e8353ae0f14ee44}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) r6 = syz_open_dev$swradio(&(0x7f0000001bc0)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000001b40)={0x4, 0x70, 0x8, 0x1f, 0x5, 0x1, 0x0, 0x5, 0x10000, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x6, @perf_bp={&(0x7f0000001b00), 0x2}, 0x1, 0xff, 0xfffffffb, 0x0, 0x7fff, 0x81, 0xff}, 0x0, 0x0, r6, 0xb7de98f4fd45e47b) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001c00)=0x1, 0x4) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/audio\x00', 0x8000, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r7, 0xc038563b, &(0x7f0000001c80)={0x0, 0x0, {0xd1, 0x355, 0x3ff, 0x4}}) r8 = syz_open_dev$swradio(&(0x7f0000001cc0)='/dev/swradio#\x00', 0x1, 0x2) mkdirat(r8, &(0x7f0000001d00)='./file0/file0\x00', 0x10) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r9, 0x80dc5521, &(0x7f0000001d80)=""/163) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000001e40)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @multicast2}, 0x20}, @in6={0xa, 0x4e23, 0xccb, @rand_addr="03ccc0118fcf080522e95028677e4444", 0xffffffff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x74) times(&(0x7f0000001ec0)) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x20, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa09}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004}, 0x4000) set_robust_list(&(0x7f0000002080)={0x0, 0x800, &(0x7f0000002040)={&(0x7f0000002000)}}, 0x18) fspick(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0\x00', 0x1) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x6) r10 = syz_open_dev$admmidi(&(0x7f0000002100)='/dev/admmidi#\x00', 0x0, 0x0) sendmsg$inet_sctp(r10, &(0x7f0000002740)={&(0x7f0000002140)=@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x1d}, 0x20000000}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000002180)="1c619d7afca20f98d3f46b46e24fc66d388525e5e55dd4cf1e2a7628df5b1f7b7e72fb1edeefc75e5cbeab7ac564857b87d95988dfa358ca3398b987f6438f63664d889806d8e84d72c320b3ab79c7b581d43a8cfece993d444924bb3ea55c9d50be897cb539028fe81d667ecae6f17a94d14d2199c8796338", 0x79}, {&(0x7f0000002200)="69833765ee6fd1b16285212ad9ffed537735865b10a2a3e9806d6bfa5dd89b4d3c6f9063b81eb7b2ff5b17f45cd3b441e6a55a9bd8cd7698660056e2d014637e96e487240c2dee93bd792f7f67a308d0cae41df281796411a3d778bfbc7d6883c8673b1fe5eb169c769f1910622a818aeaef9025eeb9ba498d82ddace70cf65447a506cbfad48eb566e9915bedd154c40caa7723b39c30c5f820377f93c508d5296f8035a4dc56854aa049ba097705ebd8c11d349631ce344d0a693986d260f4180e5d75f0c65f66a1ea18d916548ebcf8279485288ce8c25212b03109", 0xdd}, {&(0x7f0000002300)="73ee5e", 0x3}, {&(0x7f0000002340)="ae55c2", 0x3}, {&(0x7f0000002380)="aa7c1012f9ac1afc5ab6d380148311055ca92ff54ed3eb1464e4f9b49fde0c01d31e9afb56e05aae8b1f4c6e6c81ab71a7941be6157ecab200f0b1a391d913ed27f1d5b58aea5ca96766fc1072477e4d1478ee5b8b2b790b708f108a316cd043b7b358d77476a398b26df987effd99855130be8d460c3127a085a7bf4d7520c201264ae94bd63da06720c2d0e9c9fdb099540cd9fdc10861fd03539b895214fc9dad21bbcef72787b01e546652ce6ad2ca3a3af919d0c5b82aaa79bf86c4384a9328a952bb1c328428494aa490e0e8d5b8e8010e3aed0226f04829aac5d8ef3177b67f362088f6d4", 0xe8}, {&(0x7f0000002480)="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", 0xfb}, {&(0x7f0000002580)="aa91b72da285d63e6e0bc6db2754f0a841606237394a2874c31862222fde534d188aff059ce13f492e4a151bd36f00745cac3334fb52f17a180d7db18b4dbfca3c8a23bcd815694124fb3c02b7493f394c230ec36fd1c09428499fb7d36b6b4ee4d60a65f786d8c4fecabbb4be5e354f359040c85612c2d5475ea6c174e2e1633b71f8355a7b33109a70458c2d9209f2d67251885faca328f825e7a2b55a67b155f28adcb782ce06a02599b48c7e68337be7000140a596707052fe71b585a15cba2e4509aa4ed1d372a9211ef863ce703fffcd266c23ec996ad8a02e43eece", 0xdf}, {&(0x7f0000002680)="a20e7907a001346050120f5e63cdd94e0991b7c1861a12e6f748f796a339320fd08a4259899e", 0x26}], 0x8, 0x0, 0x0, 0x10}, 0x8000) 23:08:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=""/30, 0x1e}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r9, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) sendfile(r7, r7, &(0x7f0000000240), 0xfec) fcntl$setsig(r8, 0xa, 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x0) 23:08:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000008c0)="fc0000001a000700ab092500090007000aab0700000000001d60369321000100ff0200000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030010000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) socket(0xa, 0xa, 0x4) 23:08:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 309.017078][T12594] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 309.154475][T12594] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 23:08:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='.up\x00', 0x200002, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x10001, 0x20000000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10fV\xb6\xcf\xe3\x86\x91~\xabnNm\x01q\x9a\xd5\xba\x1cx%\xd3M\xccS\x98Iz\xbb\xc1p\xee\xa2\xa0H7P?e\xfa\xd6`b\x1e\xd8W\x06D\xf9\xbc& \xda\xca\x04wc\xd5\xdb\xcf\xc1OL\x18_\xf8L\x84\f\xda\x8eI4n\xb4E!\xff]B9\xa6\xc4`X\x18\b%p\xd8\x03L\xb9\v\xd2\xe8\x1d\xfb\xc3i\xe4\xd3\xf6\xfd\xa1\xbaN\xc9 {\x88_\x9f,\xad\xff\x88\xb2s\xdc\xa3D\xbe\xf0\xf8eu\x02\x8f+s\x19\xde\xd5=G\xb2E\xa3\xf6Do\xd1\vm\xee{P\x05f\x00\x00\x00\x00\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7) socket$inet_udp(0x2, 0x2, 0x0) 23:08:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r9, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) sendfile(r7, r7, &(0x7f0000000240), 0xfec) fcntl$setsig(r8, 0xa, 0x39) 23:08:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0x800000000802}) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x300082) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x3, @ipv4={[], [], @local}, 0x4}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="007800001a0000000d8a060e8b898d8c01890a878d0482818c8b8502870d000b8684"]) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000100)={0x1}, 0x4) close(r0) 23:08:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 309.657370][T12619] IPVS: ftp: loaded support on port[0] = 21 23:08:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x9f, "1a865b9adf3a56cc072646b1a262f7cc096da96c7a1a807cf768bdcc70c374509c9bd8f20952a19919afc7d326fc94b84c55313a06012fca13278e06140f4fb9a88fd2e88e3381b5ce8554117ebaa225a57bb4ca98a45041de9c50a1fda10b7e3a8a57d0387d0cdbf8bceac13f40392a6a6181bc6e128295fe4f70bdefde604bc17e66d2586ce8e5ed19a48b1e990f3435d968c509a18daa54e8ff8d05a5a3"}, &(0x7f0000000000)=0xa7) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r4, 0x5, "e0d1d10ca3"}, &(0x7f0000000200)=0xd) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r3, 0xffff) sendmmsg$inet(r3, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) 23:08:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 309.919107][T12619] chnl_net:caif_netlink_parms(): no params data found [ 310.053217][T12619] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.060443][T12619] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.069435][T12619] device bridge_slave_0 entered promiscuous mode [ 310.079389][T12619] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.086703][T12619] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.095552][T12619] device bridge_slave_1 entered promiscuous mode [ 310.187763][T12619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.212966][T12619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.251948][T12619] team0: Port device team_slave_0 added [ 310.261709][T12619] team0: Port device team_slave_1 added [ 310.437332][T12619] device hsr_slave_0 entered promiscuous mode [ 310.525232][T12619] device hsr_slave_1 entered promiscuous mode [ 310.604079][T12619] debugfs: Directory 'hsr0' with parent '/' already present! [ 311.074785][T12619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.117096][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.125682][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.149289][T12619] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.189349][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.199316][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.208312][ T2815] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.215496][ T2815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.300103][T12619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.311028][T12619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.352936][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.361769][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.371333][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.380342][ T2815] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.387556][ T2815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.397143][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.406850][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 311.416783][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 311.426614][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.436141][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 311.446055][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.455675][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 311.465063][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.474673][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 311.483861][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.576161][T12619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.755827][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.765221][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 311.773751][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.781439][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.058565][T12665] QAT: Invalid ioctl [ 312.083350][T12666] QAT: Invalid ioctl 23:08:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x1, 0xb9, 0x5}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35b08ff338832ca84b13a719c053724c5666747ea7723ef96ff4508ed4fcff49b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) r7 = shmget(0x3, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r7, 0xc) sendmmsg$alg(r3, &(0x7f0000000080), 0x492492492492751, 0x0) 23:08:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r8 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r8, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) sendfile(r7, r7, &(0x7f0000000240), 0xfec) 23:08:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x7, 0x9, [0x5581, 0x20, 0x6, 0x5, 0x1f, 0x187, 0x101, 0x8, 0x3]}, &(0x7f0000000340)=0x1a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={r3, 0x1, 'e'}, &(0x7f00000003c0)=0x9) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x80, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, r5, 0x320, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef21}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14}]}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8b}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x248b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x91}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x17, &(0x7f0000000080), 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup2(r0, r2) dup3(r8, r1, 0x0) 23:08:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 312.220036][T12678] Unknown ioctl 4726 [ 312.241483][T12677] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.264297][T12680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:39 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x5ddeadd5f0418f36, &(0x7f0000000040)=""/239, &(0x7f0000000000)=0xfffffffffffffe93) 23:08:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 312.336632][T12678] Unknown ioctl 4726 23:08:39 executing program 2: r0 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)='mime_typecgroup}-\xb6&]/vboxnet0-&lo^\x00'}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r2 = getpid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000480)=r2) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x100000028) 23:08:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r8 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r8, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) 23:08:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c9599161a000300030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 23:08:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000012000100"/20, @ANYRES32=0x0, @ANYBLOB="1b000000000000001400030064750500000000000000000000000000e1013670238f9a3fd382ec5424af16c930d937c20cf43ad1489cddd634ff91c70be65b8590eee2"], 0x34}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000b67000), &(0x7f0000000080)=0x4) 23:08:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r8 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r8, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) 23:08:40 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000010007000a0002000a0ada1b40d805000500c50083b8", 0xa4}], 0x1}, 0x0) 23:08:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:40 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x754}, {&(0x7f0000000340)=""/22, 0x16}], 0x55, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 23:08:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r7 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r7, 0x3, 0x0, 0x8001) fallocate(r6, 0x0, 0x3, 0x8003) 23:08:40 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x311, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001000ff09ff1cfe956fa283b724a6008000000000000008000000150024002e001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x351}], 0x1}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000540)='/dev/adsp#\x00', 0x0, 0x181000) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 23:08:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:40 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x101, &(0x7f0000000100)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfff, 0x41) ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000000c0)=0x1) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000c00)="84", 0x1, 0xfffffffffffffffd}]) 23:08:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 313.929193][T12750] netlink: 'syz-executor.2': attribute type 46 has an invalid length. [ 313.937956][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 23:08:41 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60f500000030060000000000000000000000000000000000fe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c002000090780000051a000000000000000000000000000000f3ff0000000000000000005c3239586f144b4dbd57d2ad8c54cf12b92b1ddcca4a7619aa5873bb635fa0c266c2114b15d4c7156e167418f892767f6e188ade48860e37e1491a9e676c4408afc330fc4dc014366f8f6a0cd98c30e58bab73f275c95e6818d7d802f040512829d20d2fa9de7c7b0af8fdb3a733c0c2242252c02dc5153dcb7234f1e0e0c4ecb27fc47125d21e"], 0x0) 23:08:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r7 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r7, 0x3, 0x0, 0x8001) 23:08:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:41 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x8f) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x6}, 0x8) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x20000) socket$netlink(0x10, 0x3, 0x1b180a446a1ad9ee) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0xa, @sliced}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) r2 = syz_open_dev$cec(&(0x7f0000000a00)='/dev/cec#\x00', 0x1, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x10000000000020, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x311}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2060221}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='`[\x00@', @ANYRES16=r4, @ANYBLOB="00042cbd7000fbdbdf250800000008000600010000003800010014000300e00000010000000000000000000000000c000700320000001000000008000100020000000c00070000000000020000000c00020008000b000a000000"], 0x60}}, 0x8dae5bf9056eb29e) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc2002101}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x32}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3441}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x50004) [ 314.381156][T12769] IPVS: ftp: loaded support on port[0] = 21 23:08:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:41 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000280)=@nl, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000420}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x118, r5, 0x20, 0x70bd2c, 0xd3, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x30}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xe}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2bb}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x5, 0x2}) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0xf6b6a9b3d9edb487) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4e21, 0x8, 0x4e24, 0x2, 0x2, 0x80, 0x40, 0x3c, 0x0, r7}, {0x4, 0x4, 0x3, 0x7, 0x2, 0x200, 0x29e0, 0xfffffffffffffffe}, {0x9, 0x7, 0x4, 0x80000001}, 0x1, 0x0, 0x0, 0x1, 0x5, 0x2}, {{@in=@local, 0x4d4, 0x2b}, 0xc74e6a182f0481da, @in=@rand_addr=0x6, 0x3503, 0x3, 0x1, 0x2, 0x8, 0x4, 0x1f}}, 0xe8) setxattr$security_capability(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.capability\x00', &(0x7f0000000600)=@v3={0x3000000, [{0xc65}, {0x5, 0x2}], r7}, 0x18, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r10}, @IFLA_GRE_FWMARK={0x8, 0xb}]]}}}]}, 0x48}}, 0x0) 23:08:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) creat(&(0x7f0000000240)='./file1\x00', 0x0) [ 314.879452][T12780] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 314.892737][T12780] batman_adv: Cannot find parent device [ 315.026210][T12769] IPVS: ftp: loaded support on port[0] = 21 23:08:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:42 executing program 4: syz_emit_ethernet(0x62, &(0x7f0000000180)={@empty, @empty=[0xf000, 0xe000000000000000, 0x800e0000, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@multicast1, @empty, @multicast1, @broadcast]}, @ra={0x94, 0x6}, @generic={0x0, 0x5, "bbcbf9"}, @rr={0x7, 0x3}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)='mime_typecgroup}-\xb6&]/vboxnet0-&lo^\x00'}, 0x30) ptrace$cont(0x18, r1, 0xffffffffffff97bb, 0x9) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = semget$private(0x0, 0x2, 0x0) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000100)=""/194) semctl$GETVAL(r3, 0x4d60f03c946a528e, 0xc, &(0x7f0000000000)=""/236) 23:08:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) fchdir(r0) r2 = memfd_create(&(0x7f0000000b80)='keyringlo\x00\xf9\xe32\x10^\xef\xf0\xfb\xca\x82\xbf\xc2K\x1c\x95\xaaPv\xben\x8b\xd7\xaf\fn\xdd\xf0\x18\'\"\xfe\xff+\x9a\x00\xce\xf0\xfbi\x84\xe5``\xde\xb0\x90\x81]\x9e\xf9\xfb\xc9\xfe\xbc\xd2e}\x98\x06_c\x0f\x14\xbc\xe0\xd3.,\xbf4\xf6\x03D\xd5\xd1tU\xfd\x1b\x7f&`t\xc3F<\x13\xbf\xbd\xc2c\xe8\xe6\xc0\xe4\xfd\xb0\xb3S\xd9n\x05\xf4\xaf\xda\xa5\xe9\xa21\x03\x00\x00\x00\xb3\xd7yO\xd3>\xcc\x81\x1fm\xb8\x06\xdaT\xef+:\xc6l\xdbA\xbd\xb6B-8\x9e\xf5;\x01l\xb1\'\xcb\xae|ggX\xe1\x99u$\xeaoW\xfe\x8e1X\xa0\xb8\x939\xf5Mm\x86\xb3\xf1\xd5\xebN\x93.J\"\xb6\xda\r\x1d>\xaf\xf99\xd91 \x19\xfc\x98\x82\xc3{d\xcc?\xf3\xe0\x01(\x1cv#\xc8\x91\x16\xa7\xdd\x8a\xefj!\x10\xb5\xc8\"q}\x7f\x9d\x03\x01a(\xean\x95\xa6ok\xb4\x17X;\xf0\xddT\xd1\xcd\x01[0\xf2\x96\xd8\xf6\xe5\xeeC\x8b&|\xf4\x03\x9a\x90_j\x83\t\x92v\x96\xe6\xdcb\xa6\xa1\x88\xba\x10\xeaWk\xd6\x99\xbc\x90x\xd3\xed\xec\xcf\xbd\xbf\xc5_C\xdd\x899\x9e\xd3XD\xe7{\xf9[\xa7\x9f\x17\xbb\x93\xbf\x85\xe1l\xf6*\x13\xb5,%\xc2R\xb7\xe4QO\x01\x1c\x9d\xa6\xb2\xcb\x7f\x19\b\xfeX\xceer\x16\xb2\xa5\x19\x0e\nrp\x99\xab\r\x83\xcc\xdd\xdb\xaag\x92\xf2\xbe\xbf\x9a\x8bqk=\xd8\x8d\x15\x90\xc1\xd4\xfc\xc1\xe8\x18\xdc\x822F\xd6\xd5\x9eD\x9f\xcf\xf4\x97\x0f\xf8\x88\xefc\xc1\'}v\xc8Y\xf6\xeb\x9f\x8c\x01=+\xba\ry\x18t\x03\xbf\xe4]\"\xa2\xb8\xdc\xb5\xffg\x9et\x81V\xc5{2e%os\x97\xf6\xc1\x8c\x91\"\xdb[\xdf\xb6pv\xee\x1a\x04\xdc\xcf\xd3&\x99\xaa\xd4q\x99\xbd\xe5\x05\x00\x00\x00\x00\x00\x00\xf2\b\xd6\xfecP\xd6\xd32\xfd\xe7\x19\xea\xe2\x97\xb7\xb4\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r5, &(0x7f0000000080)="6963e64243ea486da3a74e3deec6fc8274c1a95de56946c5bc29a9259c8a2ac467e1ffffffffffffff000000200000f8bf54da327b2cf0e4c2e61af93e1243d1996ab2a63019b4414d18dd3d58e056c7098f5d62745b6d95189077f6dc00"/106, 0x6a) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000007a80)=""/60, 0x3c) 23:08:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) 23:08:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={{0x1, 0x0, @identifier="3a326fd4fdbad9ee989b4630d0571c1d"}}) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)='mime_typecgroup}-\xb6&]/vboxnet0-&lo^\x00'}, 0x30) timer_create(0x6, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r1}, &(0x7f00000001c0)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000001340)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$vnet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 23:08:42 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x40}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000100)=0x185) 23:08:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) 23:08:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aff01175dd106736d17c3f2c876d699010000000000000025da3f0fc7ec6e265600000800490d524fa45780fbe1"], 0x58) getpid() syz_open_dev$midi(0x0, 0x0, 0x100) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x0, 0x800000000080003, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x0, 0x8, @mcast2, 0x6}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB]}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000100000000000000000000000000c1328e6d69b6f8e8f15a90c0edd07af05726d26e1ba0a3330121e3c61b28dc595399aea9275a0037f49201886ad4e0412bb3b8190d68e54765eb2909d43802d5ea213e6be5f15314dda52bb99735bb0a36f5eca4d304f6fb66376e8a80bdf6390919df1f56db2ca4a943d3f04bb0b279ceea27ee7e3bda15b206a52f095aa82aeeeca9", @ANYRES32=r6, @ANYBLOB="000000000000000048001200100001006970366772657461700000003400020008000100", @ANYRES32=r8, @ANYBLOB="14000700fe8000000000000000000000000000bb140006000e5566d5cd8dd1886967fecb85fa05a7"], 0x68}}, 0x0) 23:08:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 316.027322][ C1] sd 0:0:1:0: [sg0] tag#5587 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 316.037155][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB: Test Unit Ready [ 316.043788][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.053576][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.063349][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.073149][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.082922][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.092690][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.102428][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.112113][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.121891][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.131655][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.141421][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.151440][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.161200][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.171000][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.180788][ C1] sd 0:0:1:0: [sg0] tag#5587 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 23:08:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:43 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xfffffff8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x4ca31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r4) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000080)={0x0, 0x2, 0x4c4e, 0x40, 0x81}) [ 316.281163][T12823] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 316.410575][T12835] mmap: syz-executor.2 (12835) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 316.447794][ C0] sd 0:0:1:0: [sg0] tag#5588 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 316.457463][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB: Test Unit Ready [ 316.464108][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.473848][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.483759][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.493553][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.503334][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.513194][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.522970][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.532718][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.542602][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.552421][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.562188][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.571937][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.581933][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.591688][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.601486][ C0] sd 0:0:1:0: [sg0] tag#5588 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 23:08:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x0) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 316.626305][T12827] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aff01175dd106736d17c3f2c876d699010000000000000025da3f0fc7ec6e265600000800490d524fa45780fbe1"], 0x58) getpid() syz_open_dev$midi(0x0, 0x0, 0x100) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x0, 0x800000000080003, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x0, 0x8, @mcast2, 0x6}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB]}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000100000000000000000000000000c1328e6d69b6f8e8f15a90c0edd07af05726d26e1ba0a3330121e3c61b28dc595399aea9275a0037f49201886ad4e0412bb3b8190d68e54765eb2909d43802d5ea213e6be5f15314dda52bb99735bb0a36f5eca4d304f6fb66376e8a80bdf6390919df1f56db2ca4a943d3f04bb0b279ceea27ee7e3bda15b206a52f095aa82aeeeca9", @ANYRES32=r6, @ANYBLOB="000000000000000048001200100001006970366772657461700000003400020008000100", @ANYRES32=r8, @ANYBLOB="14000700fe8000000000000000000000000000bb140006000e5566d5cd8dd1886967fecb85fa05a7"], 0x68}}, 0x0) [ 316.888848][ C0] sd 0:0:1:0: [sg0] tag#5589 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 316.898475][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB: Test Unit Ready [ 316.905128][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.914881][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.924647][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.934419][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.944200][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.953941][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.963723][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.973484][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.983286][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.993024][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.002789][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.012513][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.022224][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.032007][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.041776][ C0] sd 0:0:1:0: [sg0] tag#5589 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 23:08:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 317.121375][T12850] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x0) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:44 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0xffffff11, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x3, 0x86}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080), 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4e21, 0x8, 0x4e24, 0x2, 0x2, 0x80, 0x40, 0x3c, 0x0, r3}, {0x4, 0x4, 0x3, 0x7, 0x2, 0x200, 0x29e0, 0xfffffffffffffffe}, {0x9, 0x7, 0x4, 0x80000001}, 0x1, 0x0, 0x0, 0x1, 0x5, 0x2}, {{@in=@local, 0x4d4, 0x2b}, 0xc74e6a182f0481da, @in=@rand_addr=0x6, 0x3503, 0x3, 0x1, 0x2, 0x8, 0x4, 0x1f}}, 0xe8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r6 = dup2(r5, r5) getsockopt$sock_int(r6, 0x1, 0x21, &(0x7f00000001c0), &(0x7f00000007c0)=0x4) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000380)=0x0) r8 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef3, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r8, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={r7, 0x0, r9}, 0xc) write$FUSE_ATTR(r1, &(0x7f0000000000)={0x78, 0xfffffffffffffffe, 0x7, {0x8, 0x9, 0x0, {0x2, 0x2, 0xc9, 0x4, 0x1, 0x1, 0x7, 0x81, 0xb7c, 0xffffffff, 0xdeba, r3, r9, 0xbc}}}, 0x78) 23:08:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) 23:08:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x0) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x200, 0x1ea) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:44 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9', 0x46400, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x0, &(0x7f0000000140)) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x349e) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000240)=0x4) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:08:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) 23:08:45 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000024005943753a03000000002823d3ca8b0bd4b4797e00", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000003, 0x0) 23:08:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) 23:08:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) 23:08:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r1, &(0x7f0000367fe4)=""/91, 0x275) 23:08:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) add_key$user(0x0, 0x0, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r3, &(0x7f00000000c0), 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r4 = socket(0x2, 0x803, 0x1) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000390000)={0x2, 0x0, @multicast2}, 0x10) r5 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r5, 0x8007ffc) write$P9_RSTATFS(r5, &(0x7f0000000080)={0x27}, 0xd) sendfile(r4, r5, 0x0, 0x72439a6b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)={0x253, 0x15, [{0x4}, {0xf, 0x1}, {0x5, 0x1}, {0xa, 0x1}, {0x8}, {0x3, 0x1}, {0xe}, {0xb}, {0xd, 0x1}, {0x2}, {0x6, 0x1}, {0xf}, {0xe, 0x1}, {0xf}, {0x8, 0x1}, {0xd}, {0x4, 0x1}, {0x3}, {0x6, 0x1}, {0xf}, {0x1, 0x1}]}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0xb) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 23:08:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 318.423170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 318.429661][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:08:45 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xa, 0x1}) 23:08:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) [ 318.773703][T12917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.786223][T12917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.795410][T12917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.806152][T12917] device bridge_slave_0 left promiscuous mode [ 318.812891][T12917] bridge0: port 1(bridge_slave_0) entered disabled state 23:08:45 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) unshare(0x8000400) [ 319.096141][T12917] device bridge_slave_1 left promiscuous mode [ 319.102953][T12917] bridge0: port 2(bridge_slave_1) entered disabled state 23:08:46 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 319.159764][T12917] bond0: (slave bond_slave_0): Releasing backup interface 23:08:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) 23:08:46 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002d00)=[{0x0}, {&(0x7f00000019c0)=""/84, 0x54}], 0x2, 0x0) 23:08:46 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 319.328088][T12917] bond0: (slave bond_slave_1): Releasing backup interface 23:08:46 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:46 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x27d, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000440)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') lchown(&(0x7f0000000140)='./file0/../file0/file0\x00', 0xee01, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 319.697776][T12917] team0: Port device team_slave_0 removed 23:08:46 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x422000a7b, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2f0000001c000507000000000d2300000200041f01000000fc0003c9130001", 0x1f}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 23:08:46 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 319.950574][T12917] team0: Port device team_slave_1 removed [ 320.020905][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 320.034089][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.041781][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:08:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x10000000003c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4", 0xc}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x37c, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x27d}], 0x1}, 0x0) 23:08:47 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) 23:08:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x0) [ 320.260871][T12964] IPVS: ftp: loaded support on port[0] = 21 23:08:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 320.632100][T12964] chnl_net:caif_netlink_parms(): no params data found [ 320.722081][T12964] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.729676][T12964] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.738575][T12964] device bridge_slave_0 entered promiscuous mode [ 320.755741][T12964] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.763182][T12964] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.771954][T12964] device bridge_slave_1 entered promiscuous mode [ 320.811754][T12964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.826590][T12964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.858696][T12964] team0: Port device team_slave_0 added [ 320.869213][T12964] team0: Port device team_slave_1 added [ 320.956186][T12964] device hsr_slave_0 entered promiscuous mode [ 321.013256][T12964] device hsr_slave_1 entered promiscuous mode [ 321.052509][T12964] debugfs: Directory 'hsr0' with parent '/' already present! [ 321.379366][T12964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.437800][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.446557][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.467369][T12964] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.508671][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.518289][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.528316][ T2815] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.535540][ T2815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.635658][T12964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.646597][T12964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.664832][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.673915][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.683390][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.692426][ T2815] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.699594][ T2815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.708238][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.718395][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.728520][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.738577][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.748231][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.758134][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.767776][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.777052][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.786852][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.796152][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.864929][T12964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.937864][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.947177][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.955841][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.963925][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.262916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 322.269140][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 322.275558][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 322.281777][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 322.288203][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 322.294325][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:08:49 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 23:08:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x0) 23:08:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) readahead(r1, 0x0, 0x0) 23:08:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) 23:08:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0)='IPVS\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB="a0000000290200ff0700001003000000080000000000000080000000000000000105002e2f6275731001000000020000000000000001800000000000007b07002e2f66696c6530100000000006000000000000008f0d0000000000000305002e2f627573ae040000000300000000000000030000000000000008"], 0x7a) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 23:08:49 executing program 2: r0 = socket$inet6(0xa, 0x20000000080002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0) read(r0, &(0x7f00000005c0)=""/132, 0x45) 23:08:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) unshare(0x0) 23:08:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 322.582921][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 322.589213][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:08:49 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='#! ./file0'], 0xa) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:08:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6(0xa, 0x20000000000002, 0x0) 23:08:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:49 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400) r4 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/2181], 0x885) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x40000000000025d, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x0, &(0x7f0000000100)=@abs, 0x930000) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 23:08:50 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xb6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r0, &(0x7f00000001c0), 0x8) 23:08:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 23:08:50 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0xfffffe38) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x660c, 0x0) 23:08:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:50 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:08:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_delroute={0x24, 0x19, 0xcca3fd92f6ab885f, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x3ff}]}, 0x24}}, 0x0) 23:08:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) 23:08:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:51 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0)='IPVS\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB="a0000000290200ff0700001003000000080000000000000080000000000000000105002e2f6275731001000000020000000000000001800000000000007b07002e2f66696c6530100000000006000000000000008f0d0000000000000305002e2f627573ae04000000030000000000000003000000000000000805002e2f6275730102000000000000000000000000000000000000000207002e2f66696c65300b000306629369a52dc22d7e39f37f6dae6e521d19098207d5e50d43bafae8a94a6f123609489dd6d3a2c5afcc183f3156ddccaa554ce9f535833131d57d225f2718b510ac7fea769c58e44f7168d06fbc3842"], 0xf3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000003) 23:08:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:51 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002d00)=[{&(0x7f00000019c0)=""/84, 0x54}], 0x1, 0x0) 23:08:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8800) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) 23:08:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000140)={'syj', 0x2}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 23:08:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:51 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x200000000000000, 0x10000}}}, 0x90) 23:08:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:51 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r2, 0x4, 0x40400) write$FUSE_WRITE(r2, &(0x7f0000000080)={0x18}, 0xffffffe2) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 23:08:52 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0)='IPVS\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB="a0000000290200ff0700001003000000080000000000000080000000000000000105002e2f6275731001000000020000000000000001800000000000007b07002e2f66696c6530100000000006000000000000008f0d0000000000000305002e2f627573ae04000000030000000000000003000000000000000805002e2f6275730102000000000000000000000000000000000000000207002e2f66696c65300b000306629369a52dc22d7e39f37f6dae6e521d19098207d5e50d43bafae8a94a6f123609489dd6d3a2c5afcc183f3156ddccaa554ce9f535833131d57d225f2718b510ac7fea769c58e44f7168d06fbc3842"], 0xf3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000003) 23:08:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000140)={'syj', 0x2}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 23:08:52 executing program 4: r0 = memfd_create(&(0x7f0000000080)='/dev/aut*Sofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r3, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 23:08:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) getpgrp(0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:52 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffff2645d4450dd89396a6ffff", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002a00010000009e97d2e4b15300fffff7", @ANYRES32=r4], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x1dc) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:08:52 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000140)={'syj', 0x2}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) dup(0xffffffffffffffff) 23:08:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) getpgrp(0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) [ 325.586321][T13163] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) getpgrp(0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:52 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x0) link(&(0x7f0000000240)='./file0\x00', 0x0) 23:08:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:53 executing program 5: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x10000}}}, 0x90) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) 23:08:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 23:08:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:53 executing program 2: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000000, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800004000"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup2(r2, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup2(r6, r5) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) listen(r4, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x19) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000280)={0xf3d0004, 0x2, 0xea, [], &(0x7f0000000240)={0x990afc, 0x200, [], @p_u32=0x0}}) pipe2(0x0, 0x102000) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1\x00'}, 0xf62c3dc8da425be8) ioctl(0xffffffffffffffff, 0x800000000008982, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00'}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c00b4c4e3f0722a733f783f1fd6fe93c6bbcbaba4cf4b7db90eb91921253757c8a3d9bf33701b4140996c0dc96af21a93ec071501e10efc8bf8c9052caf43f379202e335ce139bfe8bc9c6c2447369e06ffc8e02e84cd356a48d492a271e93c52288f637d7761dad07756a538cb7656d657513b7ff2df4a6cff20043fa9f2a5d87702c2436b821b5d96a59f95cc6a1f3f8acb0f69f19d0a9f3a1ce31be52e12f47e25421912e4dfa1ef27ee1e9d835d8c653636bbe567f29f1381464835272ff78d", @ANYRESOCT=r7, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x40040) socket$netlink(0x10, 0x3, 0x5) 23:08:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) [ 326.307113][T13204] input: syz1 as /devices/virtual/input/input38 23:08:53 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18}, 0xffffffe2) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 23:08:53 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x00'/75, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) splice(r0, &(0x7f0000000040), r1, 0x0, 0x100000200002, 0x0) [ 326.429649][T13204] input: syz1 as /devices/virtual/input/input39 23:08:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:53 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x0, 0x7ffd, 0x8000) fallocate(r1, 0x3, 0x0, 0xfff9) 23:08:53 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="343c0f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 326.708268][T13229] ptrace attach of "/root/syz-executor.1"[13227] was attempted by "/root/syz-executor.1"[13229] 23:08:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:53 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:08:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x3bc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r4, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000440)=""/24, 0x18}], 0x5, &(0x7f0000000600)=ANY=[@ANYPTR, @ANYBLOB="000000000000000009000000000000000100008000000000020000000000000044000000000000009e0b000000000000580000000000", @ANYPTR=&(0x7f0000000580)=ANY=[]], 0x46}, 0x0) 23:08:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) [ 327.153153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 327.159524][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:08:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb1", 0xa3}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0xfffffffffffffe8c}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 23:08:54 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0)='IPVS\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB="a0000000290200ff0700001003000000080000000000000080000000000000000105002e2f6275731001000000020000000000000001800000000000007b07002e2f66696c6530100000000006000000000000008f0d0000000000000305002e2f627573ae04000000030000000000000003000000000000000805002e2f6275730102000000000000000000000000000000000000000207002e2f66696c65300b000306629369a52dc22d7e39f37f6dae6e521d19098207d5e50d43bafae8a94a6f123609489dd6d3a2c5afcc183f3156ddccaa554ce9f535833131d57d225f2718b510ac7fea769c58e44f7168d06fbc3842"], 0xf3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000003) 23:08:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:54 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x51, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 23:08:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x3bc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r4, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000440)=""/24, 0x18}], 0x5, &(0x7f0000000600)=ANY=[@ANYPTR, @ANYBLOB="000000000000000009000000000000000100008000000000020000000000000044000000000000009e0b000000000000580000000000", @ANYPTR=&(0x7f0000000580)=ANY=[]], 0x46}, 0x0) 23:08:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:54 executing program 5: [ 328.422884][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 328.429078][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:08:55 executing program 1: 23:08:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:55 executing program 5: 23:08:55 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0)='IPVS\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB="a0000000290200ff0700001003000000080000000000000080000000000000000105002e2f6275731001000000020000000000000001800000000000007b07002e2f66696c6530100000000006000000000000008f0d0000000000000305002e2f627573ae04000000030000000000000003000000000000000805002e2f6275730102000000000000000000000000000000000000000207002e2f66696c65300b000306629369a52dc22d7e39f37f6dae6e521d19098207d5e50d43bafae8a94a6f123609489dd6d3a2c5afcc183f3156ddccaa554ce9f535833131d57d225f2718b510ac7fea769c58e44f7168d06fbc3842"], 0xf3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000003) 23:08:55 executing program 5: [ 328.502898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 328.509197][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 328.515613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 328.521735][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 328.528081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 328.534390][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:08:55 executing program 1: pipe(0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x10000}}}, 0x90) 23:08:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syj', 0x2}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 23:08:55 executing program 1: 23:08:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x3bc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r4, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000440)=""/24, 0x18}], 0x5, &(0x7f0000000600)=ANY=[@ANYPTR, @ANYBLOB="000000000000000009000000000000000100008000000000020000000000000044000000000000009e0b000000000000580000000000", @ANYPTR=&(0x7f0000000580)=ANY=[]], 0x46}, 0x0) 23:08:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:56 executing program 4: 23:08:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:56 executing program 1: 23:08:56 executing program 4: 23:08:56 executing program 1: 23:08:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:56 executing program 4: 23:08:56 executing program 5: 23:08:56 executing program 1: 23:08:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x3bc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r4, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000440)=""/24, 0x18}], 0x5, &(0x7f0000000600)=ANY=[@ANYPTR, @ANYBLOB="000000000000000009000000000000000100008000000000020000000000000044000000000000009e0b000000000000580000000000", @ANYPTR=&(0x7f0000000580)=ANY=[]], 0x46}, 0x0) 23:08:56 executing program 4: 23:08:56 executing program 5: 23:08:56 executing program 1: 23:08:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x8}, 0x3}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:57 executing program 5: 23:08:57 executing program 1: 23:08:57 executing program 4: 23:08:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:57 executing program 5: 23:08:57 executing program 1: 23:08:57 executing program 2: 23:08:57 executing program 4: 23:08:57 executing program 5: 23:08:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:57 executing program 1: 23:08:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:57 executing program 1: 23:08:58 executing program 5: 23:08:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:58 executing program 4: 23:08:58 executing program 1: 23:08:58 executing program 2: 23:08:58 executing program 5: 23:08:58 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:58 executing program 1: 23:08:58 executing program 4: 23:08:58 executing program 5: 23:08:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:58 executing program 2: 23:08:58 executing program 4: 23:08:58 executing program 1: 23:08:58 executing program 5: 23:08:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:58 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:58 executing program 1: 23:08:58 executing program 4: 23:08:58 executing program 2: 23:08:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'eql\x00', {0x2, 0x0, @multicast1}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000004900)=0xfffffffffffffff9) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) close(r3) write(r0, &(0x7f0000000080)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) 23:08:59 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) 23:08:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, 0x37}) 23:08:59 executing program 1: 23:08:59 executing program 2: 23:08:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:59 executing program 2: 23:08:59 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) [ 332.210560][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 23:08:59 executing program 4: 23:08:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0263000d07"], 0x90ad) 23:08:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) write$binfmt_misc(r0, &(0x7f00000010c0)={'\x00', "f3d08e2c1d1e46450800"}, 0xe) 23:08:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 23:08:59 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f0000000100)=0x80, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000004c0)="fe", 0x1) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x2}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x6, &(0x7f0000000180)=@framed={{}, [@exit, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xaf, &(0x7f0000000400)=""/175, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x3}, 0x10}, 0x70) [ 332.453159][T13464] device nr0 entered promiscuous mode 23:08:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfd, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) [ 332.539116][T13471] ===================================================== [ 332.539121][T13471] BUG: KMSAN: uninit-value in number+0x680/0x1e40 [ 332.539125][T13471] CPU: 0 PID: 13471 Comm: syz-executor.1 Not tainted 5.4.0-rc8-syzkaller #0 [ 332.539130][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.539132][T13471] Call Trace: [ 332.539135][T13471] dump_stack+0x1c9/0x220 [ 332.539139][T13471] kmsan_report+0x128/0x220 [ 332.539141][T13471] __msan_warning+0x64/0xc0 [ 332.539143][T13471] number+0x680/0x1e40 [ 332.539146][T13471] ? __msan_poison_alloca+0x139/0x180 [ 332.539150][T13471] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 332.539153][T13471] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 332.539155][T13471] vsnprintf+0x1e99/0x3210 [ 332.539159][T13471] vscnprintf+0xc2/0x180 [ 332.539161][T13471] vprintk_store+0xf2/0x11f0 [ 332.539164][T13471] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 332.539167][T13471] vprintk_emit+0x2c6/0x860 [ 332.539170][T13471] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 332.539173][T13471] vprintk_default+0x90/0xa0 [ 332.539176][T13471] vprintk_func+0x635/0x810 [ 332.539179][T13471] ? __msan_poison_alloca+0x139/0x180 [ 332.539182][T13471] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 332.539185][T13471] printk+0x180/0x1c3 [ 332.539188][T13471] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 332.539191][T13471] canfd_rcv+0x370/0x3a0 [ 332.539194][T13471] ? can_proto_unregister+0x180/0x180 [ 332.539197][T13471] netif_receive_skb_internal+0xb72/0xc20 [ 332.539200][T13471] netif_receive_skb+0x1da/0x3a0 [ 332.539203][T13471] tun_get_user+0x6d8c/0x70c0 [ 332.539205][T13471] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 332.539209][T13471] tun_chr_write_iter+0x1f2/0x360 [ 332.539212][T13471] ? tun_chr_read_iter+0x460/0x460 [ 332.539214][T13471] __vfs_write+0xa2c/0xcb0 [ 332.539217][T13471] vfs_write+0x481/0x920 [ 332.539220][T13471] ksys_write+0x265/0x430 [ 332.539223][T13471] __se_sys_write+0x92/0xb0 [ 332.539225][T13471] __x64_sys_write+0x4a/0x70 [ 332.539228][T13471] do_syscall_64+0xb6/0x160 [ 332.539232][T13471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.539234][T13471] RIP: 0033:0x45a649 [ 332.539243][T13471] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.539247][T13471] RSP: 002b:00007f988cab6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.539254][T13471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 332.539258][T13471] RDX: 00000000000090ad RSI: 00000000200000c0 RDI: 0000000000000003 [ 332.539262][T13471] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 332.539266][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f988cab76d4 [ 332.539269][T13471] R13: 00000000004cb17e R14: 00000000004e38d8 R15: 00000000ffffffff [ 332.539271][T13471] [ 332.539275][T13471] Uninit was created at: [ 332.539278][T13471] kmsan_internal_poison_shadow+0x60/0x120 [ 332.539281][T13471] kmsan_slab_alloc+0x97/0x100 [ 332.539284][T13471] __kmalloc_node_track_caller+0xe27/0x11a0 [ 332.539287][T13471] __alloc_skb+0x306/0xa10 [ 332.539290][T13471] alloc_skb_with_frags+0x18c/0xa80 [ 332.539293][T13471] sock_alloc_send_pskb+0xafd/0x10a0 [ 332.539296][T13471] tun_get_user+0x125e/0x70c0 [ 332.539299][T13471] tun_chr_write_iter+0x1f2/0x360 [ 332.539301][T13471] __vfs_write+0xa2c/0xcb0 [ 332.539304][T13471] vfs_write+0x481/0x920 [ 332.539307][T13471] ksys_write+0x265/0x430 [ 332.539310][T13471] __se_sys_write+0x92/0xb0 [ 332.539312][T13471] __x64_sys_write+0x4a/0x70 [ 332.539315][T13471] do_syscall_64+0xb6/0x160 [ 332.539318][T13471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.539322][T13471] ===================================================== [ 332.539326][T13471] Disabling lock debugging due to kernel taint [ 332.539330][T13471] Kernel panic - not syncing: panic_on_warn set ... [ 332.539335][T13471] CPU: 0 PID: 13471 Comm: syz-executor.1 Tainted: G B 5.4.0-rc8-syzkaller #0 [ 332.539339][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.539342][T13471] Call Trace: [ 332.539345][T13471] dump_stack+0x1c9/0x220 [ 332.539347][T13471] panic+0x3c9/0xc1e [ 332.539350][T13471] ? startup_64+0x1/0x30 [ 332.539352][T13471] kmsan_report+0x215/0x220 [ 332.539355][T13471] __msan_warning+0x64/0xc0 [ 332.539358][T13471] number+0x680/0x1e40 [ 332.539360][T13471] ? __msan_poison_alloca+0x139/0x180 [ 332.539364][T13471] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 332.539367][T13471] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 332.539370][T13471] vsnprintf+0x1e99/0x3210 [ 332.539372][T13471] vscnprintf+0xc2/0x180 [ 332.539376][T13471] vprintk_store+0xf2/0x11f0 [ 332.539379][T13471] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 332.539382][T13471] vprintk_emit+0x2c6/0x860 [ 332.539386][T13471] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 332.539388][T13471] vprintk_default+0x90/0xa0 [ 332.539391][T13471] vprintk_func+0x635/0x810 [ 332.539394][T13471] ? __msan_poison_alloca+0x139/0x180 [ 332.539398][T13471] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 332.539400][T13471] printk+0x180/0x1c3 [ 332.539403][T13471] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 332.539406][T13471] canfd_rcv+0x370/0x3a0 [ 332.539409][T13471] ? can_proto_unregister+0x180/0x180 [ 332.539412][T13471] netif_receive_skb_internal+0xb72/0xc20 [ 332.539415][T13471] netif_receive_skb+0x1da/0x3a0 [ 332.539418][T13471] tun_get_user+0x6d8c/0x70c0 [ 332.539421][T13471] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 332.539424][T13471] tun_chr_write_iter+0x1f2/0x360 [ 332.539427][T13471] ? tun_chr_read_iter+0x460/0x460 [ 332.539430][T13471] __vfs_write+0xa2c/0xcb0 [ 332.539432][T13471] vfs_write+0x481/0x920 [ 332.539434][T13471] ksys_write+0x265/0x430 [ 332.539438][T13471] __se_sys_write+0x92/0xb0 [ 332.539440][T13471] __x64_sys_write+0x4a/0x70 [ 332.539443][T13471] do_syscall_64+0xb6/0x160 [ 332.539446][T13471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.539449][T13471] RIP: 0033:0x45a649 [ 332.539457][T13471] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.539460][T13471] RSP: 002b:00007f988cab6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.539467][T13471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 332.539471][T13471] RDX: 00000000000090ad RSI: 00000000200000c0 RDI: 0000000000000003 [ 332.539475][T13471] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 332.539479][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f988cab76d4 [ 332.539483][T13471] R13: 00000000004cb17e R14: 00000000004e38d8 R15: 00000000ffffffff [ 332.539488][T13471] Kernel Offset: 0x20600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)