, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfeffffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:22 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1098) 14:34:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x6000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:22 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x500}]}) 14:34:22 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r2 = pidfd_getfd(r1, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000380)=0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r3 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)={0x7, 0x0, [{0x0, 0x0, 0x0}, {0x100000, 0xc4, &(0x7f0000000200)=""/196}, {0x3000, 0x15, &(0x7f0000000300)=""/21}, {0x1, 0xb8, &(0x7f0000001640)=""/184}, {0x0, 0x1000, &(0x7f0000000440)=""/4096}, {0x0, 0x75, &(0x7f0000001440)=""/117}, {0x2, 0x78, &(0x7f00000014c0)=""/120}]}) 14:34:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@host}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x10b0) 14:34:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x4, 0x0, [{0x0, 0x0, 0x0}, {0x2000, 0xe3, &(0x7f0000000080)=""/227}, {0xd000, 0xf0, &(0x7f0000000180)=""/240}, {0x1, 0x21, &(0x7f0000000000)=""/33}]}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x1, 0x10000, 0x5, 0x84800, 0xffffffffffffffff}) preadv2(r1, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/75, 0x4b}], 0x1, 0x5, 0x9, 0x1) fcntl$setflags(r0, 0x2, 0x1) 14:34:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x6558, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:23 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x600}]}) 14:34:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) 14:34:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x10c8) [ 783.194160][ T1512] __nla_validate_parse: 39 callbacks suppressed [ 783.194179][ T1512] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 783.279099][ T1514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = dup(r0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@host}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x2, 0x0, &(0x7f0000000080)=""/86, &(0x7f0000000100)=""/214, &(0x7f0000000200)=""/225}) [ 783.361559][ T1524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 783.384412][ T1545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:23 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x700}]}) 14:34:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x8100, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x10e0) 14:34:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) dup3(r1, r0, 0x80000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000200)=""/117, &(0x7f0000000380)=""/237, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 783.666355][ T1567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:23 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xff00}]}) [ 783.734233][ T1570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 783.774296][ T1574] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:34:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x10f8) [ 783.888054][ T1603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 783.941001][ T1580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 783.965852][ T1585] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:34:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xc0000004}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x3}) 14:34:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xffffffc3, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xf000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000200)=""/105, &(0x7f0000000380)=""/132, &(0x7f0000000440)=""/165, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000140)=[0x5], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x200, &(0x7f0000000500)=""/171, &(0x7f0000000180)=""/117, 0x0}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001800)={0x7, 0x0, [{0x2000, 0x1d, &(0x7f00000000c0)=""/29}, {0x5000, 0x6, &(0x7f0000000100)=""/6}, {0x6000, 0x6c, &(0x7f00000005c0)=""/108}, {0x1000, 0x1000, &(0x7f0000000640)=""/4096}, {0x2000, 0x7d, &(0x7f0000001640)=""/125}, {0x3000, 0x41, &(0x7f00000016c0)=""/65}, {0x4, 0xb3, &(0x7f0000001740)=""/179}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:24 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x80000}]}) 14:34:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1110) 14:34:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x301100, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) 14:34:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:24 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x1000000}]}) 14:34:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x40000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1128) 14:34:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001580)={0x5, 0x0, [{0x5000, 0xc0, &(0x7f0000000200)=""/192}, {0x6000, 0x1000, &(0x7f0000000380)=""/4096}, {0x3000, 0x81, &(0x7f0000001380)=""/129}, {0x100000, 0xc0, &(0x7f0000001440)=""/192}, {0x2000, 0x7e, &(0x7f0000001500)=""/126}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/116, 0x0, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:24 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x2000000}]}) 14:34:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/133, &(0x7f0000000380)=""/138, 0x0, 0x10000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xf0ffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1140) 14:34:25 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000200)=""/125, &(0x7f0000000380)=""/170, &(0x7f0000000440)=""/216, 0x2}) 14:34:25 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x3000000}]}) 14:34:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:25 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x100000003, 0x0, 0x80019c) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000549c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x80, "5d5f08bf5a4620"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000549c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x80, "5d5f08bf5a4620"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{r3, 0x4fa, 0x1000, 0x9, 0x7ff, 0x6, 0x3, 0x3, 0xffffffff, 0x7, 0x3ff, 0x7, 0x740, 0x0, 0x4}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1158) 14:34:25 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) 14:34:25 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x4000000}]}) 14:34:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x3000, 0xf, &(0x7f0000000000)=""/15}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:25 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x14, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, 0x16}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40804) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1170) 14:34:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:26 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x5000000}]}) 14:34:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x8040) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x430}, {r0, 0x8040}, {0xffffffffffffffff, 0x84}, {r3}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4301}, {0xffffffffffffffff, 0x400}], 0x7, 0x7) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1188) 14:34:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x3000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:26 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x6000000}]}) 14:34:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x185, 0x185, 0x6, [@datasec={0x2, 0x6, 0x0, 0xf, 0x2, [{0x1, 0xd65, 0x1}, {0x1, 0x3ff, 0x3151}, {0x5, 0x81}, {0x5, 0xffffffff}, {0x3, 0x2, 0x7db}, {0x5, 0x4701, 0x6c8c}], 'U#'}, @struct={0x10, 0x3, 0x0, 0x4, 0x0, 0x6, [{0x4, 0x1, 0xfffffe00}, {0x10, 0x3, 0x2}, {0x5, 0x5, 0x50}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x74, 0x0, 0x10, 0x4}, @ptr={0x10}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x0, 0x4}, {}, {0x2, 0x4}, {0xc}, {0xc}, {0xf, 0x2}, {0x4, 0x3}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x54, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x5}, {0x6}]}, @datasec={0x8, 0x6, 0x0, 0xf, 0x3, [{0x1, 0x200, 0x7}, {0x1, 0xb17, 0x80}, {0x5, 0x7, 0x9}, {0x1, 0x200, 0x7}, {0x2, 0x2, 0x100}, {0x5, 0x3, 0x6}], "850a40"}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f0000000200)=""/191, 0x1a6, 0xbf, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0xffffff00, 0x0, &(0x7f0000000080)=[r0, r1, r0, r0]}, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x11a0) 14:34:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000380)=""/4096, &(0x7f0000000000)=""/33, &(0x7f0000000200)=""/211, 0x107003}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000001380)={0x2}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="b751ec310300995f8cc6fe81fe00"], 0x14}, 0x1, 0x50000}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000) 14:34:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x4000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:26 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x6ffffff}]}) 14:34:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x11b8) 14:34:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=""/161, &(0x7f00000000c0)=""/119, 0x0, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468224db9fdb0b5adb5"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x3}}, 0x20}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000180)={0x0, @aes256, 0x0, @desc3}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@hyper}) 14:34:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x6000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:27 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x7000000}]}) 14:34:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x11d0) 14:34:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000080)={0x3, 0x1000}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000802800680000000000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYRESHEX], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x11) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000380)={{}, 0x0, 0x2, @unused=[0x7, 0x3, 0x0, 0x1], @name="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"}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000200)=""/223, &(0x7f0000000380)=""/123, &(0x7f0000000400)=""/161}) 14:34:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x7000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:27 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x8000000}]}) 14:34:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000200)=""/160, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x11e8) 14:34:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000000)={0x100, 0x48, [], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x200000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = signalfd4(r0, &(0x7f0000000280)={[0x8]}, 0x8, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 14:34:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x6, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)={0x5, 0x0, [{0x3000, 0xa1, &(0x7f0000000200)=""/161}, {0x6000, 0xef, &(0x7f0000000380)=""/239}, {0x3000, 0x22, &(0x7f0000000080)=""/34}, {0x1, 0xa0, &(0x7f0000000480)=""/160}, {0x4, 0x1000, &(0x7f0000000540)=""/4096}]}) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000000)={0x0, 0xfffffffb}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:27 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x200000c0}]}) 14:34:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1200) 14:34:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x9000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:28 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=""/212, &(0x7f0000000380)=""/170, &(0x7f0000000440)=""/189, 0xd000}) 14:34:28 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xc0000020}]}) 14:34:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) 14:34:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1218) 14:34:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 788.205845][ T2118] __nla_validate_parse: 49 callbacks suppressed [ 788.205866][ T2118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xa000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:28 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x422040, 0x0) r2 = syz_open_dev$audion(0x0, 0x2, 0x2800) bind$rds(r2, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) r3 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x2, r3}) [ 788.384585][ T2140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:28 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xfdfdffff}]}) 14:34:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1230) [ 788.530914][ T2150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:28 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x0, @tick=0x1b1f, 0x0, {0x40}, 0xa8, 0x1, 0x6}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 788.684270][ T2145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x2, 0x0, &(0x7f00000000c0)=""/129, &(0x7f0000000180)=""/119, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1c) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x10000, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000200)=""/238, &(0x7f0000000380)=""/149, &(0x7f0000000440)=""/148, 0x1}) 14:34:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 788.760214][ T2158] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:28 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xff000000}]}) 14:34:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xc000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1248) [ 788.944944][ T2196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x3000, 0x0, 0x0}]}) [ 789.101544][ T2212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:29 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xfffffdfd}]}) 14:34:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1260) [ 789.214985][ T2222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 789.252935][ T2234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x60, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xe000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000200)=""/142, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/150, 0x1000}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x800000000000117, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 789.480543][ T2269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:29 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xffffff06}]}) 14:34:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1278) 14:34:29 executing program 0: ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$CHAR_RAW_SECDISCARD(r1, 0x127d, &(0x7f00000000c0)=0x120) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)={0x2, 0x0, [{0x100000, 0x2f, &(0x7f0000000080)=""/47}, {0x5000, 0x17, &(0x7f0000000380)=""/23}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0712018e00c52bb60e655150b408d02520e2fca6cee585e6a238fcd6b956d57d9e96c7508fdcb851ad514c980c46f888f2e2917e84718968c08f4aa10ac35f5bba1be30d731420f1ddbe8aac581b360998e659d7e3e753a7ae29f9585933bc34f7573c2c7aa5fce9b3c447e5400c9b3ea9950747212e04d35f394960d9340bcb6fa2e553df8b154a6c16569ef404747b0760eb7f7bdfca130711b931519b0ed467a75f6540624b86666d62f301dd7948ace3ddae0f27291472b42ad64bec6d02439b1cd83e436a60cc33da0fe4dccad36e1162de17f1e44df1d86ef91455f4", @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000005000800000000000a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000580)={&(0x7f0000000140), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0xcb, &(0x7f0000000200)=""/203}]}) 14:34:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xf000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1290) 14:34:30 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x8000000000000}]}) 14:34:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000025c0)={0x7, 0x0, [{0x100000, 0xdf, &(0x7f0000000200)=""/223}, {0x0, 0x4a, &(0x7f0000000380)=""/74}, {0x4000, 0xa6, &(0x7f0000000400)=""/166}, {0x530d68bc7024037a, 0xd3, &(0x7f00000004c0)=""/211}, {0xd000, 0xf, &(0x7f0000000080)=""/15}, {0xd000, 0x1000, &(0x7f00000005c0)=""/4096}, {0x6000, 0x1000, &(0x7f00000015c0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/ubi_ctrl\x00', 0x309000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000028c0)={0x0, 0x1, &(0x7f0000002700)=""/211, &(0x7f0000002800)=""/9, &(0x7f0000002840)=""/112, 0x4}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)) 14:34:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x300, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:30 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x100000000000000}]}) 14:34:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12a8) 14:34:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) dup2(0xffffffffffffffff, r0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x2, 0x1, &(0x7f0000000000)=""/34, &(0x7f0000000200)=""/188, &(0x7f0000000380)=""/135, 0x4000}) 14:34:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x20000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x600, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:30 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x200000000000000}]}) 14:34:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12c0) 14:34:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x40, 0x3ff, 0x6, 0x2, 0x5, 0x0, 0x4, {0x0, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x45}}, 0x4, 0x6, 0x1ff, 0x1f, 0xfffffffa}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000380)={r5, 0x80}, &(0x7f00000003c0)=0x8) r6 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x20000) dup(r6) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000480)={0x4}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) fallocate(r7, 0x10000002a, 0x5, 0x8010000000800) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x2, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/107, 0x0, 0x3000}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000400)={0x2, 0x8}, 0x2) 14:34:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x42f9e1dd, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x7f0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:31 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x300000000000000}]}) 14:34:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@host}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x2}) 14:34:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 14:34:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0, 0x10000}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000002c0)={0x3, 0x8}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x0, 0x0}]}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000640)={0x0, 0x1, &(0x7f0000000540)=""/21, &(0x7f0000000580)=""/92, &(0x7f0000000600)=""/43, 0x4000}) fcntl$dupfd(r2, 0x406, r0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1172c3, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000200)=""/148, &(0x7f0000000380)=""/129, &(0x7f0000000440)=""/218, 0x3000}) 14:34:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x60000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x900, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12f0) 14:34:31 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x400000000000000}]}) 14:34:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000100)=""/147, &(0x7f0000000080)=""/119, 0x0, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:31 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x500000000000000}]}) 14:34:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf00, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1308) 14:34:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x65580000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1320) 14:34:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x81000000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:32 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x600000000000000}]}) 14:34:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1338) 14:34:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=""/153, &(0x7f0000000180)=""/119, 0x0, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) pipe(&(0x7f0000000000)) 14:34:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:32 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x700000000000000}]}) 14:34:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x6000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1350) 14:34:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:32 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x800000000000000}]}) 14:34:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8100, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x9, 0x0, [{0x0, 0x2, &(0x7f0000000080)=""/2}, {0x4000, 0x4a, &(0x7f0000000200)=""/74}, {0xf000, 0xba, &(0x7f0000000380)=""/186}, {0x1000, 0xc0, &(0x7f0000000440)=""/192}, {0x10000, 0x19, &(0x7f0000000280)=""/25}, {0x1000, 0x51, &(0x7f0000000500)=""/81}, {0x3000, 0x91, &(0x7f0000000580)=""/145}, {0x1, 0x95, &(0x7f0000000640)=""/149}, {0x0, 0x45, &(0x7f0000000700)=""/69}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f00000008c0)={'L-', 0x200000000000}, 0x16, 0x3) 14:34:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1368) 14:34:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xc3ffffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:33 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xc000002000000000}]}) 14:34:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1380) [ 793.332563][ T2663] __nla_validate_parse: 41 callbacks suppressed [ 793.332587][ T2663] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 793.476156][ T2664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e80000009f9e50daadf39ef5a2779dd35e05669d1217209fa72ffc026aab0ebf39c3ffdc6db954916f34f99ef4261a35e143bc0e14e7b02d579644c612f17375e9ba9bf65b49e095f57d784d2eee8af646f5115c1dd1884463", @ANYRES16=r4, @ANYBLOB="298925bd7000fedbdf25070000002c00028006000e004e22000006000e004e21000008000900ff070000060002004e220000060002004e21000018000180140003002001000000000000000000000000000108000600ea0000003c00028008000700a197000008000900090000000800080002000000080004000500000008000400000000000800060000000000080009000700000008000600f7ffffff08000400ffff000014000280080004000001000008000900050000002800018014000300ac14140c000000000000000000000000070006006c630000060001000a000000"], 0xe8}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0, r1}, 0x68) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000580)={@host}) 14:34:33 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xfdfdffff00000000}]}) [ 793.618388][ T2666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1398) [ 793.684802][ T2664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 793.710635][ T2693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:34:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf007, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 793.868220][ T2709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:34:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xdde1f942, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:34 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xff00000000000000}]}) [ 793.979929][ T2716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x13b0) 14:34:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) eventfd(0x3) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 794.118457][ T2721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 794.215267][ T2718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 794.246840][ T2721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x40000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:34 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xffffff0600000000}]}) 14:34:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x13c8) 14:34:34 executing program 0: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000480)={0x2, 0x0, &(0x7f0000000000)=""/30, &(0x7f0000000380)=""/246, &(0x7f0000000300)=""/46, 0x3000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x2, 0x0, [{0x3000, 0x3f, &(0x7f0000000080)=""/63}, {0x100001, 0x80, &(0x7f0000000200)=""/128}]}) 14:34:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfcffffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:34 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xffffffff00000000}]}) 14:34:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x13e0) 14:34:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfeffffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:35 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xffffffffffffffff}]}) 14:34:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x13f8) 14:34:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:35 executing program 0: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) eventfd(0x10001) 14:34:35 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x2, 0x0, &(0x7f0000000200)=""/172, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)) 14:34:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1410) 14:34:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x2000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x0, 0x9}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:35 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) clone(0x4200400, &(0x7f0000000040)="291ba4bc7a5de021b6adb58877634f94ff740f6710ea927675e54d84", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)="2bb0142595c78cde0875b545f50d62b380430784551553ed5c49240237481ffbcb9ab4cea53b6d93e72108cc56bc") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x5, 0x0, [{0x5000, 0xc3, &(0x7f0000000200)=""/195}, {0x2000, 0xc3, &(0x7f0000000380)=""/195}, {0x4000, 0x49, &(0x7f0000000480)=""/73}, {0x2000, 0x19, &(0x7f0000000080)=""/25}, {0x1000, 0xed, &(0x7f0000000500)=""/237}]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1428) 14:34:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0x7ff, 0xa45}) r2 = dup(r0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)={0xa, 0x0, [{0x1c000, 0xf, &(0x7f0000000080)=""/15}, {0x2, 0xaa, &(0x7f0000000200)=""/170}, {0x4, 0x99, &(0x7f0000001ec0)=""/153}, {0x0, 0x13, &(0x7f00000002c0)=""/19}, {0x1000, 0x27, &(0x7f0000000440)=""/39}, {0x2, 0xd3, &(0x7f0000000480)=""/211}, {0x10000, 0xca, &(0x7f0000000580)=""/202}, {0x100000, 0xf4, &(0x7f0000000680)=""/244}, {0x10000, 0xff, &(0x7f0000000780)=""/255}, {0x2000, 0x52, &(0x7f0000001e40)=""/82}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000380)=0x1c) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001d40)={0x6, 0x0, [{0x6000, 0x19, &(0x7f0000000a80)=""/25}, {0x4, 0xc6, &(0x7f0000000ac0)=""/198}, {0x6000, 0x5d, &(0x7f0000000bc0)=""/93}, {0x6000, 0x40, &(0x7f0000000c40)=""/64}, {0x5000, 0x1000, &(0x7f0000000c80)=""/4096}, {0x0, 0xa6, &(0x7f0000001c80)=""/166}]}) 14:34:36 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x4000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1440) 14:34:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000400)=""/160, 0xa0}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/187, 0xbb}, {&(0x7f00000004c0)=""/94, 0x5e}], 0x5, &(0x7f00000017c0)=""/113, 0x71}}, {{&(0x7f0000001840)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1, &(0x7f00000028c0)=""/4096, 0x1000}, 0x20000000}], 0x2, 0x40000021, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003b00)=@ipv6_deladdrlabel={0x0, 0x49, 0x400, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x20, 0x0, 0x0, 0x400}, [@IFAL_LABEL={0x0, 0x2, 0x6}, @IFAL_LABEL, @IFAL_ADDRESS={0x0, 0x1, @local}, @IFAL_ADDRESS={0x0, 0x1, @private1={0xfc, 0x1, [], 0x1}}]}, 0xfffffd07}}, 0x0) close(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = fcntl$getown(r6, 0x9) syz_open_procfs(r7, &(0x7f0000000080)='attr/fscreate\x00') ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000200)=""/178, &(0x7f0000000380)=""/196, &(0x7f0000000480)=""/69, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1458) 14:34:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x6000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x20}, 0x16, 0x7) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x100, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x5, 0x0, [{0x0, 0x80, &(0x7f0000000380)=""/128}, {0x1, 0x3, &(0x7f00000002c0)=""/3}, {0x3000, 0x77, &(0x7f0000000400)=""/119}, {0x3000, 0x88, &(0x7f0000000b00)=""/136}, {0x5000, 0x91, &(0x7f0000000540)=""/145}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)={0x3, 0x0, [{0x1000, 0x82, &(0x7f00000006c0)=""/130}, {0xf000, 0xfb, &(0x7f0000000780)=""/251}, {0x4000, 0x17, &(0x7f0000000880)=""/23}]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000a80)={0x2, 0xe0000000, &(0x7f0000000940)=""/8, &(0x7f0000000480)=""/107, &(0x7f0000000a00)=""/92, 0x2000}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000ac0)) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000240)=0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 14:34:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1470) 14:34:37 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x1d) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = socket$can_bcm(0x1d, 0x2, 0x2) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000880)=""/145, 0x91}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/79, 0x4f}], 0x5, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xffffffc3, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1488) 14:34:37 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) 14:34:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004640)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0100000000000000040000000700010066770000200002000800010000000500140003"], 0x4c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c811}, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x82040, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x1c) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x14a0) 14:34:37 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = socket$inet6(0xa, 0x80000, 0x3f) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x3fe0000000000000, {0x23, 0x80, 0x4, 0x1ff, 0x6}}) clone3(&(0x7f0000000440)={0x40600000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x10}, &(0x7f0000000280)=""/41, 0x29, &(0x7f0000000380)=""/163, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x5, 0x0, &(0x7f00000004c0)=[r0, r3, r0]}, 0x3) fchmod(r2, 0x6c) 14:34:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x14b8) 14:34:38 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tkill(0x0, 0x4) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000310010002dbd7000fddbdf25000000001800010014001800656c5f6b657900"/44], 0x2c}, 0x1, 0x0, 0x0, 0x60044401}, 0x30) r1 = open(&(0x7f0000000840)='./file0\x00', 0x2840, 0x102) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="51990000000000000000010000000000000002410000000c001369623a6873723000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r3, 0x4, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'tunl0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4091}, 0x801) clone(0x8000000, &(0x7f00000005c0)="c3490c49107afd35140174b7e5ada0575b150ce36e8756d0e49daea86b12ba5f09e0bd4807a2723f35ec2dd832235d2034d30e0034705863abeced005bd7ea321663f26a7997f1a48eb176797e506c14be8f03e61469d0961720497a0613eccfd7702dc3b2d9e2f3302d40a714b6d3fec569801cf5a2355d3b9e85552279ebc81663bff61d9662397964b7b0c8351e5fac67e1f8785339c9c68947fc59092c2053689580eee2cfa034fa216deae7e39fad9bdeee70623d6aa855ee98b935f89fa1ff496bcc404f16d847ca30900b091554a919399ba9710b0a59a44902d52c55895383843e", &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="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") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x3, 0x1, &(0x7f0000000200)=""/104, &(0x7f0000000380)=""/194, &(0x7f0000000480)=""/214, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x14d0) [ 798.378664][ T3163] __nla_validate_parse: 44 callbacks suppressed [ 798.378686][ T3163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:38 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/112, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 798.544916][ T3164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 798.693772][ T3179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000000)={0x2, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x14e8) [ 798.747850][ T3168] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:39 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x100000, &(0x7f00000002c0)="145e0e67bb984f7d658d9a8398ecb65f9697fdb5c5e2a7bcd560803be217d9c2cf686c8233f801eb65e7ffb67bbc56eb237ecc62f5", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="45d113669c77ff2ad70948dd977128c94fa4b8dd86f9c1de7636cd7333c387f3c6fe4aadd3d4e3319a9c4c614bbc28853a2f4fc1d721ac90b7962359e9cfa7e9c2fc181873dc8ec9a2d25f3edc224195647a63c77bf09a455ac606b095f29d80eccd7e6e91aabd703e04b3453c74b9662b06d29e") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x4000, 0x0, 0x0}]}) clone(0x800, &(0x7f0000000200)="00e8c28cc218430c802c11d753916b5fea1f7ac8b1b842cd32666abcd3d8343730aea53dde0cab590610255428723fce22532e8370f7394b62dc17f3bbfb6134de52611746ffe7f4ef9b6ca719223a4442f9eb9d9b5a3ab33839a7fe5babda6dd1441c755c96de08a4e0c34c5408edf57eacbe4bf6df4a923813ddc00212e0d5bf1f91bab3a5bfffd2e10af8e53be6401edae307628bf0174ae980", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000380)="22222bdab78e352e36ccee02326a511e147e6f7876e7456f3ad2accd23bb632f119ef9ecc34b75edd09c117348af4ba74ccf13ba5501c25237bdcf949098cf332df8616dcb7f27d25500475cf653ee5f8f6235ce158e39bac7d863990560138434414f1b908cb37d496da54702edec42bb3c256dacff3dcd45f9cb228cd84719e37124e79e054fd2c1137737fcd6b7c6b8d5928ed46a77c3a3c62195be2195f517ab66a1d0deb123c7c41f14412c45ce5b33bfe5ec8e81aad2a9d0a9ec89916c") 14:34:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x260440f0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:39 executing program 0: sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x1, 0x70bd29, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000200)={0x9b0000, 0x1, 0x9, r0, 0x0, &(0x7f0000000080)={0x9b0905, 0x6, [], @string=&(0x7f0000000000)=0x7}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000003c0)={0x1, 0xc8}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x680402, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000440)={0x0, 0x7fffffff}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 799.006441][ T3212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1500) [ 799.163376][ T3219] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:39 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=""/151, &(0x7f0000000180)=""/119, 0x0, 0x6001}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 799.329996][ T3212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:39 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000380)={0x8, "963ef157436d9903640543927574db13e7996e3a36328455ec2c98606e03f1881204dbc679ee76d19c7f4c2c5fd6f26149ddfbec74307349c541c51897063d64f91432ce76811710e0982972e4e070a636691c2bf1845d9d0ceb58c404cd800fa44f859db25294e7be8e15fc9a88151de276529e439f5400b4719b88ef9b95b98d33e0e258d617ce2daf923f221090bbc3e08c2cd28a7f281a8447e20901b0377ee866c39a7fd1e5443a012ea2a6c36ab804417a61d14fab72b32487e0ba4023e9e23a6e71db7b360253d0aaa6f2be508be8265b58e5f83065d04245aa8d4dc6a1e29c253460f7131e6259c58f88223490776f1ed1be06f5f56107c09865cbfa"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=""/152, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 799.378759][ T3256] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1518) 14:34:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x464352e9, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x3}}, 0x20}}, 0x0) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x4040}, {r0, 0x4}, {r1, 0x6}, {r4}, {r0}, {r0, 0xb204}, {r9, 0x9034}, {r0, 0x140}, {r0, 0x200}, {r0, 0x284}], 0xa, 0x40) 14:34:39 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, &(0x7f0000002800)=""/29, &(0x7f0000000200)=""/254, &(0x7f0000002840)=""/102386, 0x10000}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x40000, 0x101, 0x8}, 0x18) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f000001cc40)={0x7, 0x0, [{0xd000, 0xc3, &(0x7f000001b840)=""/195}, {0x5000, 0x59, &(0x7f000001b940)=""/89}, {0x2000, 0x37, &(0x7f000001b9c0)=""/55}, {0x5000, 0x54, &(0x7f000001ba00)=""/84}, {0x1000, 0xb0, &(0x7f000001ba80)=""/176}, {0x4000, 0x1000, &(0x7f000001bb40)=""/4096}, {0x2, 0xd3, &(0x7f000001cb40)=""/211}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) clone(0x8000000, &(0x7f0000001780)="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", &(0x7f0000000300), &(0x7f0000002780), &(0x7f00000027c0)="c2432ea20af2061de9869c7e6412ddb7c2ffbada77b42df07bc7dc713b8b2e2d280a706ef549fcb2985f02") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)={0x3, 0x0, [{0x3000, 0x1000, &(0x7f00000003c0)=""/4096}, {0x3001, 0xd9, &(0x7f00000013c0)=""/217}, {0x10000, 0x2e, &(0x7f00000014c0)=""/46}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001700)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x86, &(0x7f0000001580)=""/134}, {0x0, 0xb5, &(0x7f0000001640)=""/181}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f000001cd40)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 799.653442][ T3276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 799.758078][ T3277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1530) 14:34:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x60000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x100000, 0x15, 0x0}]}) 14:34:40 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) clone(0x80000, &(0x7f0000000200)="a3cf7b6f41621a7a83e09bfc550ec362786e0d696622f2fcc15e2b5ed5c5641550ff57f81f26124a2266015c567d31ce3c0d48f190ea9e7e9ce6ccea1ac1842977735c2b85af5560166608c987790252cba77c33731cfc396f05ae1b21b576210f28fdd5e74368a14c7be6996e545e1630a10653359fc377ded133c7fd978480c7282b494e0768318f8451a25f19c0cba4ec98bb114ac8cf7c45ba2418f906874cc25fa2d7d0ccb4be4a052bf8c574", &(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)="c3a776155b65b386ae02ec8ff7cf4671a25f379f2c83f52725a6c3353173cfb1d6bf8c33dc9c78804da5eb7af620dcc0e558282ecb712fc56dce87082a616e79fa163b56064d2523de2ee314c179c10aa93214378d453b82d96e2eb2aebdff6a559294b220a91feb4cbffc96efa6fd5ca10378373716078864c20cac6337f4055cddc2fc72c07aef") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) 14:34:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1548) 14:34:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x81000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000200)={0x8000, 0x7}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x80000f, 0x10010, 0xffffffffffffffff, 0x10000000) r3 = fsopen(&(0x7f0000000000)='binder\x00', 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3, 0x2, 0x0, 0x1}, 0x9a4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1560) 14:34:40 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) ptrace$setopts(0x4206, r1, 0x3, 0x2) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000080)=""/139, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)={0x2, 0x0, [{0x6000, 0xc1, &(0x7f0000000200)=""/193}, {0x6000, 0x12, &(0x7f0000000000)=""/18}]}) 14:34:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1578) 14:34:41 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @multicast1}, {0x1, @broadcast}, 0x0, {0x2, 0x4e21, @remote}, 'team0\x00'}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8000000) 14:34:41 executing program 0: ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x5) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000380)={[0x25d, 0x10000, 0x1f, 0x80, 0xd1db, 0xfffffffc, 0x6, 0x4fe, 0x0, 0x35, 0x8, 0x7ff, 0x9, 0x0, 0x1ff, 0x10000, 0x6, 0x1f96, 0xeb, 0x2, 0x0, 0x1, 0x8, 0x6, 0x7ff, 0x1, 0x1ff, 0x23a, 0x80, 0x40, 0x267, 0xffff, 0x8001, 0x6, 0x1, 0x1, 0x80, 0x3, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x6, 0x0, 0xffffffe1, 0x8, 0x6, 0x1, 0x101, 0xfffffff7, 0xf35b, 0x80000000, 0x80, 0x10000, 0x7, 0x4, 0xfffffff9, 0x6, 0x2, 0x1, 0x9, 0x8001, 0x6, 0x3, 0x6, 0xffff, 0x1, 0x60176cf0, 0x3, 0x1, 0x9, 0x4, 0x7f, 0x1ff, 0x1, 0xc3, 0x4, 0x200, 0x0, 0x2f79, 0x4, 0x3, 0x80, 0x2, 0x7ff, 0x5, 0x7, 0x9, 0x8, 0x3, 0x101, 0x5, 0x7, 0xfffffc00, 0x4, 0x551, 0x5, 0x5, 0x535, 0x8, 0x3f, 0x2, 0x7fff, 0x3, 0x6, 0xfffffffa, 0x5, 0x1, 0x6, 0xffff0000, 0x7, 0xeb32, 0x7, 0x0, 0x400, 0x7, 0x1, 0x1f, 0x2, 0x0, 0x3f, 0xcfd2, 0x5, 0x8001, 0x2ef3769e, 0x5, 0x400, 0x8001, 0x2, 0x0, 0x20, 0x3f0, 0xffff, 0x20, 0xf9e1, 0x9, 0x4, 0x6, 0x2, 0x0, 0x8721, 0x3, 0xce, 0x906, 0x1, 0xda0, 0x7bc, 0x0, 0xfffffff7, 0x3, 0x45, 0x3, 0xffff, 0x2c3, 0x3, 0x6, 0x8001, 0x3, 0xfffff01c, 0x1, 0x3, 0xbf6f, 0x8, 0x966, 0x101, 0x1ff, 0x3, 0x3f, 0x9, 0x4, 0x5, 0x21d6, 0x9d0, 0xebd8, 0x3, 0x0, 0xf2, 0x7f, 0x6, 0xfffffff9, 0x7f, 0x9c, 0xffffdf2c, 0x80000001, 0xfff, 0x10001, 0x9, 0x2, 0x42, 0x46d6a1cd, 0x3, 0x7, 0x1, 0x8, 0x7, 0xe58, 0xff, 0x0, 0x3, 0x0, 0x3, 0x20, 0x8, 0x2, 0xf0, 0x3, 0xfffffeff, 0xff, 0x6, 0x40, 0x3, 0x7, 0x7, 0x0, 0x5, 0x2, 0x10000, 0xffffffff, 0x0, 0x4, 0x0, 0x7a4b, 0x311, 0x8, 0x2, 0x9, 0x2, 0xc2, 0x4, 0xfffff56e, 0x3ff, 0x2, 0x4955, 0x3f6, 0x7fffffff, 0x2650, 0x0, 0x80000000, 0x800, 0x0, 0x0, 0x6, 0x8, 0x99da, 0xe8, 0x8, 0x0, 0x238e, 0x9, 0x2, 0x800, 0x2, 0x80000001, 0x7, 0xffff8000, 0x3, 0x8, 0x4, 0x9, 0x6, 0x7, 0x200, 0x2, 0x8001, 0x10001, 0xffff, 0x9, 0x7, 0x81, 0x90a, 0x1000, 0x9, 0x3, 0x3f, 0x8, 0x8, 0x1f, 0x80000000, 0xfffffff7, 0x4, 0x1, 0x9, 0xfffffffe, 0xd5, 0x0, 0x4, 0x0, 0x80, 0x5cb7, 0xfff, 0x8000000, 0xfffff800, 0xff, 0x7, 0x9, 0xfff, 0x7, 0x800, 0x1ff, 0x0, 0x5, 0x1000, 0x80000001, 0x7f, 0x8, 0x9, 0x80000001, 0x0, 0x0, 0x200, 0x0, 0x7fffffff, 0xfffffffd, 0x64, 0x1, 0x7, 0x8, 0x90c, 0x7, 0x1, 0xffffffff, 0x8000, 0xb863, 0x3ff, 0x0, 0x8, 0x7fff, 0x1f, 0x101, 0x218, 0x1c7, 0x9, 0x8001, 0x3, 0x1, 0x7, 0x8, 0x4, 0x73, 0xffff, 0x7fffffff, 0x7, 0x1c000000, 0x2000, 0x7, 0x5, 0xb6e, 0x6, 0x9, 0x28d9, 0x2, 0x4, 0x6, 0xfffff800, 0x40, 0x10000, 0x8, 0x5, 0x8, 0xfffffffe, 0x8, 0x81, 0x4, 0xe8ee, 0xfffffffe, 0x474, 0xe2, 0xa2c, 0x0, 0x3ff, 0x1, 0x5, 0xfffffff8, 0x84e4, 0x7, 0x4, 0x82, 0x9, 0xfffffffe, 0x3f, 0x6, 0x4, 0x3f, 0x0, 0x4, 0x1, 0x3, 0x5, 0x7f, 0x7, 0x3, 0x4, 0x9, 0x4, 0xffffffe0, 0x39, 0x898, 0x3, 0x8, 0x400, 0x1f, 0xab, 0x4, 0x5, 0xfffffff9, 0x8000, 0xffffffff, 0xe492, 0x4, 0xe2ad, 0xffffff58, 0x8000, 0xff, 0x1, 0x4, 0x8ee0, 0x40, 0x7df0f48e, 0x80000000, 0x2, 0x3, 0x4, 0x20, 0x573f, 0xffff, 0x3ff800, 0x9, 0x7, 0x9, 0x6, 0x4, 0x9, 0x7fffffff, 0x80000001, 0x9, 0x1, 0x54, 0x2, 0x81, 0x1000, 0xe4e, 0x2, 0x0, 0x7, 0x2, 0x80, 0x9, 0x7, 0x8, 0x2, 0xff, 0x3, 0xfffffff9, 0x8, 0x7, 0x1, 0xfff, 0x7af, 0x80, 0x0, 0x7f, 0xfe1, 0x5775, 0x8, 0x3222977d, 0x4, 0x42a, 0x3, 0x4, 0x4f, 0x20, 0x58, 0x1, 0x9, 0x40, 0xa1, 0x9e88, 0x1, 0x40, 0x2, 0x1, 0x20, 0x5, 0xfffffffc, 0x3, 0x80000001, 0x25c, 0x7, 0x4, 0xc7e, 0xfff, 0x35e, 0x401, 0xac, 0x40, 0x401, 0x401, 0x9, 0x3, 0x918, 0xe0000000, 0x100, 0x1, 0x7, 0x100, 0x7f, 0x9, 0x1f, 0x80000000, 0x1, 0x80000000, 0xfff, 0x2, 0x8, 0x5, 0xfffffff7, 0x101, 0x119, 0x2, 0x8000, 0x264, 0x7, 0xc626, 0x9d, 0x5, 0x9, 0x3, 0x4, 0x5ef1, 0x9, 0x4, 0x45, 0xff, 0x3f, 0x1, 0x8, 0x1, 0x6, 0x80000000, 0x26f, 0x9, 0x1, 0x0, 0x8, 0x7fff, 0x3ff, 0xf8fc, 0x5, 0xfffffff7, 0x388, 0x3ff, 0x8, 0x1, 0x7, 0x3, 0x6, 0xfff, 0x8, 0x3, 0xffffffff, 0x3ff, 0x9, 0x8001, 0x1f, 0x401, 0xfffffff7, 0x3, 0x6, 0x40, 0x2, 0x9, 0x1, 0x1f, 0x7, 0x0, 0x5, 0x5, 0x4, 0xffffffc1, 0x80000000, 0xffffffff, 0x2, 0x400, 0xfff, 0x3, 0x5, 0x8, 0x287, 0x6, 0x3f, 0x200, 0x62f, 0x6, 0xa2, 0x1, 0x6, 0x4f72, 0x7fffffff, 0xa3c6, 0x5, 0x1f, 0x5, 0x941c, 0x7, 0x0, 0x7, 0x101, 0x9, 0x81, 0xff, 0x5, 0x1, 0x4, 0x1000, 0x3, 0x2b19d243, 0x80, 0x128584b5, 0x311, 0x4, 0x8, 0x0, 0x1, 0x1, 0x5f1a916b, 0x5, 0x9, 0x9f, 0x7243d495, 0xf530, 0x0, 0xe8, 0x8, 0xffffffff, 0xcead, 0x1, 0x10000, 0x10000, 0x2, 0x0, 0x5, 0x2, 0x9, 0x4, 0x1, 0x5, 0xb933, 0x9, 0x2, 0x2e579ce1, 0x6, 0x1ff, 0x1, 0x9, 0x62, 0xc0, 0x6, 0x7, 0x4, 0x4bc6, 0x0, 0x6, 0x600000, 0x96c6, 0x4, 0x5, 0xfb, 0x85b, 0x81, 0x200, 0x3ff, 0x8000, 0x2, 0x8, 0x7f, 0x2, 0x479c, 0x5, 0x81, 0x7, 0x5, 0x3f, 0x3, 0xa5, 0x3, 0x1, 0x30fb71a7, 0x80, 0x4, 0x8, 0x4, 0xec6, 0x8, 0x9, 0x80, 0x14a, 0x3, 0x0, 0x9, 0xcc9b, 0x9, 0x1, 0x101, 0x3, 0x9, 0x1, 0x2, 0x6, 0xffffffff, 0x1, 0x8000, 0x7, 0x80000000, 0x7, 0x8, 0x8, 0x5d5, 0x3, 0x0, 0xffffffb0, 0x3, 0x5, 0x8, 0x3, 0x8, 0x6ff, 0xb89, 0x5, 0x14, 0x7998, 0x53, 0x3, 0x7ea, 0xffffffff, 0x3f, 0x7fff, 0x5, 0x4, 0x4010000, 0x400, 0xe66, 0xfffffffc, 0x1f, 0x881, 0x10000, 0x3ff, 0x7ff, 0xdd18, 0x20, 0x7f, 0x9, 0xb6, 0x3, 0x4, 0x10000, 0x1, 0x100, 0x9, 0x1ff, 0xa4, 0x3ff, 0x2, 0x0, 0xdb2, 0x1, 0x10000, 0x73, 0x9, 0x0, 0x7ff, 0x10001, 0x8001, 0xfee, 0x1694, 0x20, 0x5, 0x80, 0x1, 0x8, 0x3, 0xe18000, 0x4, 0x4, 0x2, 0x7, 0x8, 0x80000001, 0x5, 0x8, 0xeec00000, 0x7, 0x7f, 0x1, 0x6, 0x8, 0x9, 0x4, 0x3, 0x6, 0x11, 0x1, 0x0, 0x80000000, 0x200, 0x69a, 0x8, 0x1ff, 0x7, 0x3, 0x6, 0x7, 0x5, 0x0, 0xfffff800, 0x1, 0x6, 0x3, 0x377, 0x81, 0x2d30, 0x101, 0x1ff, 0x4, 0x5, 0xbc01, 0x0, 0x2, 0xcba, 0x7, 0x1f, 0x4417, 0x8000, 0x2, 0x10000, 0x4, 0x1, 0x83, 0x20, 0x7, 0x200, 0x8, 0x7fffffff, 0x2, 0x5, 0x6, 0x2, 0xfffffffc, 0x1, 0x20, 0x0, 0xfff, 0x10001, 0x0, 0x0, 0x9, 0x0, 0x1109fa07, 0x3, 0x9, 0x3, 0x2b58be6a, 0x3, 0x0, 0x4, 0x1117, 0x5, 0x79e0705, 0x1000, 0x20, 0x3, 0x8ff, 0x40, 0x5, 0x4df7fc7f, 0xbcf3, 0x2, 0x1a, 0x4, 0xc714, 0x0, 0xfff, 0x4, 0x2, 0x6, 0x7, 0x879, 0xffffffff, 0x1, 0x40, 0x2, 0x1, 0x3, 0xffffff55, 0xffff, 0x6, 0x7fffffff, 0x1, 0x2, 0xffff1340, 0x6, 0x0, 0x6, 0xff, 0x157, 0x8, 0x488a, 0x81, 0x5, 0x4, 0x1, 0x8, 0xe74e, 0x5, 0x2b, 0x3, 0x1, 0x3, 0x5, 0x8001, 0xad, 0x3, 0xffffffff, 0x80000000, 0x5, 0x3ff, 0x200, 0x6, 0x1, 0x1ff, 0x400, 0x2, 0x4, 0x1c00000, 0x39c, 0x101, 0xfffffff8, 0x1, 0x6, 0x5, 0xfffff7ea, 0x9, 0x4, 0x2, 0x1978, 0x2, 0x23e, 0x613, 0x7fffffff, 0x3cf31507, 0x7, 0x3ff, 0x2, 0x0, 0x0, 0x3230, 0x5, 0x1, 0x4, 0xd0, 0xff, 0x0, 0x100, 0x3, 0xed, 0x800, 0x1ff, 0x7, 0x7, 0x4, 0x9, 0x76, 0x7ff, 0x5, 0x43009129, 0x4, 0xffffff00, 0x7, 0x40, 0xfc, 0x0, 0x8, 0x7, 0xff, 0x8, 0x7, 0x200, 0x0, 0x1, 0x1, 0xfff, 0x0, 0x1f, 0x3, 0x9, 0x1, 0xff, 0x3, 0x0, 0x4, 0x9, 0x8, 0x80, 0x2b, 0x1, 0x4, 0x800, 0x9, 0xfffffffd, 0x2, 0xea4, 0x4, 0xec, 0x7, 0x5, 0x7384891b, 0x8, 0x3, 0x7, 0x0, 0x828, 0x80, 0x7fff, 0x3]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x6, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xc3ffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) 14:34:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1590) 14:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/129, &(0x7f0000000180)=""/114, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x90000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x25, 0x2, 0x23) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x1, 0x9, 0x8, @dev={0xfe, 0x80, [], 0x1a}, @private1={0xfc, 0x1, [], 0x1}, 0x7800, 0x7800, 0x9, 0x1544}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000540)={r6, 0x1, 0x6, @dev={[], 0x1b}}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000002ee40507800000f70000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100764574680a5375"], 0x48}}, 0x0) preadv(r3, &(0x7f00000002c0), 0x0, 0x20000000, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x3, r2}) 14:34:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xe9524346, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x15a8) 14:34:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1100) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x3, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf0070000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x15c0) 14:34:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000380)=""/4096, &(0x7f0000000200)=""/138, &(0x7f0000001380)=""/139, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x8000) 14:34:42 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x89000, &(0x7f0000001740)="5cec2e11b90d466a79c3066f48755d65348fcb150945b17f01040e181e4dc603f5719f00000000c7119185e1e2bc880b5a77738de820d128b2fedaf47c4dd860fa6333936c9ff15aa1ffe89ad7e01fc7077f46688612d12d940fac7e66b767a0cd9b36fa00f665857b24fe81b148f20f69d2a51f29ecdf20520eb76b1e651a1eff3fb5a7b1ba01d4581d59f7e3f1fb8c31f75d768e19577d57fcb64c134e6f9aeeb159486c2f48d557628b4805a0d54053aeca1af6541b6187", &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000500)="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") getpid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x1021200, &(0x7f00000015c0)="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", &(0x7f0000000000), &(0x7f00000016c0), &(0x7f0000001700)="9773b05a09cefe42696d14b792ca72a4e2ac936c95bdc2c227193d17d5ee18ae892dbd95c11b814029") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000300)={@hyper}) ptrace$cont(0x9, 0xffffffffffffffff, 0x7, 0x0) clone(0x84014800, &(0x7f0000000380)="686a17420b64876e8019aeeccf2e6c9fc58662826ba948f205ca473914a89c5f2f9d1915e22e13d0594c54425a68485aa145c4a40eb2f1da614748ac242b2442e21d3541b28c8399380fea2624510e7bee0f65ef7f201408260c9dab6685713d5b2ea4b8c73cf1fdcc45ed4e2ce3aab3719f51dfd80b3ecd6695aef73ff9af821ecc2644066f12c5ab9fac48e79951d9115caaac9a3c6bc1c806a61edd8c6fb5e88e8b22d6bd7445", &(0x7f0000000200), &(0x7f0000000440), &(0x7f0000001840)="835c472b9659bba81a5a6ee9855899a36e0fab3dd58ebac4f9ebf51def610b373c4378e7a6783ee96e45fbba5f0b32f566374f7f498988c3959e95520eeedd8580fe9ed68a4c791c2e78137cf30fc21a13ebe7e866ae64e5bfb7d7585fc146df008787c2b526d81d6790c1647563642b828b0b5b5835fb8786deb1882737b56d0c3e5a77a8fa96c08f651466344c14a8bb4e44f5673d4c443f71499a7d288316a5e207e97d3d54c2b2b0ec5a04a55662e7f440d61e017445a08f574b42743c03a6233bc714a2edfb84a33f349ac9f10d3a378e902b06380dc6e7607c05dda793cf9b2ed1bd28f51a528bf39f03bb281c728741e0a5df00"/256) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) 14:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf0400426, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000200)=""/145, &(0x7f0000000000)=""/47, &(0x7f0000000380)=""/154, 0x3000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:42 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000500)={0x2, 0x3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)=""/20, &(0x7f0000000200)=""/132, &(0x7f0000000380)=""/232, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80801) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000980)={{[], 0x1}, {0x3}, 0x108, 0x0, 0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)="8f3d101589f8695fd0ab56f25f7dd3a303eb967942e84fb23fbd79e97ed5888a57acdccb29b9c963ea606b8287fddf6e5a0251ad0b2d81ffb2ff88ab1b0672ba5617f45ef3f4d12028d991ac8dfb478dec4084c5f7756f52597f6effa0191214d05cad66a4b9e4481733732373368fcaa6178122990d49e0d6c17dd0d8297e7e24abea914e67861c9002542c9fa1635ecaedddec8f6518fc03814dfe50fc55d6ad70568d6fcbf69736f3c131473f159d202973e620eda8302b530631c181b47bf55b6e01f42bedc2526de065ca535f81df4191aa21ed193bc397bc60", 0xdc, 0x0, &(0x7f0000000840)={0x2, 0x108, {0x1, 0xc, 0x14, "14dc8fb3dd525a97415a1c56a2fb3667a58aaf84", 0xe7, "02d98a63ba08910ed2ef8e8b046839d838ca2b5901eea925ce62d37d570cc520542935db7eb5773c472190b869612d58ad3b5d86728c91a244d6dd8db4ecf907bcc7d1d7253da4f781a911eec7753865e3b3459839c6159c99e3c4d23772f0837b355357148cabe285de8d47896b3f5f0819b65476ebac2f94634a04b0abd61734da9595c9320ee2060ca7c2c1dc067990d42c84786d059a7b9b76765cb08b84baa5804e26c541e635537f8d632b90a02893fd21f2f2cec2ecb7643486550ba6fc3477d337461d0828fb049eff7d0658525bea6b8dbb84913367fe278c3ede56f24420adc8cc23"}, 0x1, "ec"}, 0x115}) clone(0xa0c800, &(0x7f0000000540)="04672aa32c228724dd886b66a1a0d3c678a42411b023a2f578ec3e470ea6168a150fc540b6a1ef06076b07d291b7df8f5e272608e43acc3ad0153e0c90259712f1939fd63f48fd78c4", &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="e10d2c329cc9881e131610da6105d893f83540b1c4f2b16ad7120a075e50e44c6c3270f975b13af371609298a64d5ab51f76e13259c5a98c2f5df9f77b27a100bc90c60caee582853f811f97d919") ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000004c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x15d8) 14:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xa, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=""/145, &(0x7f0000000080)=""/132, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:43 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) clone(0x101000, &(0x7f0000000380)="f815813c3aa4cdeac1c9021fd0b7a10e387cd8679083d72d916ee02be95653adae6dbc3c96429bd96d95d02bb8909778fe2076963cabfcd8f1988cdd0142590b608d03cd13953782b6619375388c1033b418d543c08f05013cf032f633c41c8ed98f6b477cd8641566337c95b4b2826afa4af5fcb685100e2733173307c22a6f525b1d19cf6d3f1a1fa8ae6301ec35894a9512e8e053c8d5223414ea0ce0307bc5b666ada9cee1aa1ee4c111269610b2ee7bae10fffec7bb5db041d42196ecc7468fb89f6cfbe750499488c1cf4e8a1d40a73999270d48428f7595325010f698b61574316ecdb74c97c8c7170a3f29324c17f0ec", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="717d26b157ef222a3d06404928d43296c2180c016421259983c5057f22a7a77425840bb0df8a909dc48140a068bba2") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) clone(0x30082180, &(0x7f0000000000)="9a29b5204944ab7a4a6c31fd73b8885fe8a1a1f503d33ae7d3d2cf", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)) 14:34:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x15f0) 14:34:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xc, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x280400, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x5, 0x0, [{0x2000, 0x0, &(0x7f0000000380)}, {0x5000, 0x71, &(0x7f00000003c0)=""/113}, {0x4, 0x68, &(0x7f0000000440)=""/104}, {0x1000, 0x12, &(0x7f00000004c0)=""/18}, {0x4000, 0x1e, &(0x7f0000000500)=""/30}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x3e9, 0x4, 0x70bd26, 0x25dfdbfc, {0x20, 0x1, 0x1, 0x0, 0x2, 0xffff0000, 0x1ff, 0x2, 0x0, 0x47}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4090) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfcffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1608) 14:34:43 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80080000, &(0x7f0000000000)="86a2f4d7b908b68ad7c495593735770a196fa387", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000380)="c71b51fe548d86d01a2f0dba45a2df4a7c2672b947d429f90bd05dff53acc7dd38ff539a68be470941963760f841d4603b158d2ac57caa02e036578db9560cc8f0e6a119afb471e172e3f242300c56eeee59e49d01a7ac82efa65bccf13b1216382d89862b6c0a86530dcb64327bdfdaa19f265bb87fa334a3e482a32c7b150eaa13f71cc81ccccedfd7768522dea7b6a07f5fa32dfa0350b7e1435e97dda1b210c4bffc6c4590933bdf41157b451aeb33e30acbd3aebd65a3220f0f0fd312ca34d83f217b42f4466dabbda9718b7aa7fabc7f5bbbf2fa9fa5da94abd9e16ffb8b0d9ab9161274cfb776b01ab95466ab") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xe, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 803.387957][ T3643] __nla_validate_parse: 40 callbacks suppressed [ 803.387979][ T3643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0, 0x4}) r1 = dup3(r0, r0, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)={0x56, 0x0, [{0x6000, 0x2a, &(0x7f0000000380)=""/4096}, {0x2, 0x0, &(0x7f0000000200)=""/98}]}) [ 803.553130][ T3645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 803.598020][ T3657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1620) 14:34:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 803.734911][ T3675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:43 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1'}, 0x4) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x2, 0x1, &(0x7f0000000200)=""/221, &(0x7f0000000380)=""/69, &(0x7f0000000480)=""/90, 0x4000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfeffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r2 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x109003, 0x122) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000080)={0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000003, 0x110, r1, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x10000000) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfffb}, {0xe, 0x4}, {0xffff, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd=r6, 0x101, &(0x7f0000000380)="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", 0x1000, 0x8, 0x1}, 0xefa6) [ 803.946303][ T3691] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1638) [ 804.078054][ T3703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 804.180177][ T3696] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000200)=""/132, &(0x7f00000004c0)=""/105, &(0x7f0000000400)=""/142, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) 14:34:44 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x8000000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x4000010, r2, 0x8000000) r4 = syz_io_uring_setup(0x48c2, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x172}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)=0x0) r6 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000818000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r4, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r8}}, 0x3ff) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4000, @fd_index=0x7, 0x8, 0xffffffffffffffda, 0x0, 0x6, 0x0, {0x0, r8}}, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x10}, 0x1, {0x0, r8}}, 0xbfe) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 804.226065][ T3712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x10, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1650) [ 804.417561][ T3733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4e20, 0x5, 0x4e24, 0x81, 0xa, 0x180, 0x0, 0x67, r4, 0xffffffffffffffff}, {0x6, 0x0, 0x7, 0xa964, 0x3, 0x7, 0x242, 0x7}, {0x6, 0x1, 0x4, 0xffffffffffffffc1}, 0x4, 0x6e6bbc, 0x0, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, [], 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@mcast1, 0x3506, 0x0, 0x0, 0x3f, 0x1, 0xd1ae, 0x3}}, 0xe8) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=""/239, &(0x7f0000000380)=""/137, &(0x7f0000000440)=""/244, 0x206001}) [ 804.555382][ T3744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:44 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000380)=""/4096, &(0x7f0000000200)=""/218, &(0x7f0000001380)=""/249}) 14:34:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x60, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1668) 14:34:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000000)=""/61, &(0x7f0000000080)=""/39, &(0x7f00000000c0)=""/132, 0x4000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=""/160, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:45 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x3, 0x0, [{0xd000, 0xe0, &(0x7f00000006c0)=""/224}, {0x2000, 0x6f, &(0x7f00000007c0)=""/111}, {0x4, 0x9e, &(0x7f0000000840)=""/158}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x3, 0x0, &(0x7f0000000440)=""/90, &(0x7f00000004c0)=""/212, &(0x7f00000005c0)=""/130, 0x5000}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000980)={0x0, 0x3, 0x7f, 0x100000000}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='/dev/vhost-vsock\x00', &(0x7f0000000200)='/dev/vhost-vsock\x00', &(0x7f0000000240)='!\x00'], &(0x7f00000003c0)=[&(0x7f00000002c0)='/dev/vhost-vsock\x00', &(0x7f0000000380)='(-}!){\'\x00']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x3ff, 0x10001, {r1}, {r2}, 0x2, 0x7ff}) chown(&(0x7f0000000400)='./file0\x00', r2, 0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1680) 14:34:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:45 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x101) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:45 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = dup3(r0, r0, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x4, 0x0, [{0x4000, 0x9c, &(0x7f0000000200)=""/156}, {0x4, 0xd5, &(0x7f0000000380)=""/213}, {0x1000, 0xb1, &(0x7f0000000480)=""/177}, {0x100000, 0x9c, &(0x7f0000000540)=""/156}]}) 14:34:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1698) 14:34:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffffc3, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}}, 0x20}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x1, 0x8}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x300, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x16b0) 14:34:45 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x3ff, 0x10001, {r1}, {r2}, 0x2, 0x7ff}) r3 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x2, r2}, {0x2, 0x4, 0xee01}, {0x2, 0x5}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x7, 0xffffffffffffffff}], {0x4, 0x1}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x5, 0xee00}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x0, r3}, {0x8, 0x1}], {0x10, 0x1}}, 0x74, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7}) 14:34:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x600, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x16c8) 14:34:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$vcs(0xffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r7}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000100)={"6f881eb8e60c7363ecb11d26bdd7154a", r8, 0x0, {0x7fff, 0x50a}, {0xe164, 0x2265ab45}, 0x7, [0x0, 0x7, 0x7f, 0x6, 0x100000000, 0x8, 0x1, 0x3f, 0x100000000, 0x6, 0x80, 0x36c, 0x3, 0xffffffff, 0x8000, 0x20]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000380)={{r1}, r8, 0x0, @inherit={0x90, &(0x7f0000001380)=ANY=[@ANYBLOB="010000000000000009000000000000001f00000000000000ff010000000000000100000000000000ffff00000000000007000000000000000fb40000000000000000000000000000090000000000000000000080000000000000000000000000000000ffff0000000000000500000000000000060000000000000000020000000000000000000000000000db3a27d99fc55e7d7eedb203cf14d717ee957e850bf4c5daf053b4ac5bfde986af04d6d91d4f9aa162cb84f131f6d656ce97a45dc5fea8540e4959a6326f7b7cbc70cb9bf1bec3b9fccfe98d9ba8094371775ce16d8ca6715159870765206b7df4cef4983697e49f8274ffd5ce2c8188c00fa89868fe43d91c5bd6916e3148f38683e5ebcb2e51bdff32cd9225d6b976a792c0da34971c4f25f9e0999710887ed193f24720278524507de29f1c60603a8804393b75112d0a3fb68ffab931dd5d9de2d5f1efc3a080343b6bdc497396067e5125504d985e952f2dab5b07468067a62b0eb29a13c74c5d0f3d2133c14686a21878899b3d81d1d80fd9"]}, @subvolid=0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:46 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) clone(0x8000, &(0x7f0000000200)="cc8debb530fb1211fbc62a3f72b8f0947ed1452d270d3b66457e194f71b2d574067a5e52d37d51c56887574ab5fe11e4eca5d8ce14db7c23d5d671053936e209259f689d12db2947a39809dcee1059ba043788253e14c6e9e7bb1bb647bca469ed81889e15331379e5e1ee0043655e0005356fa8183c45c3cad16a925f78c36c97f6da7a66ef7a591cc69c8c2c09e9f887ce489df60d0d52d897ad4698", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000380)="5725eacfe23a9d70ce4cf7dfb966d0cad72e562905dc069ba721f82dc921743e8f2a285021c2c3ab86fc668f04225a4f8f0af29177dd06e087dbbee5197be1d50a83ff93392780b190be21edadf22752012894dabbddfefffeb765817e408a21650fd56e3166799f61310f1804e89889af25d01c97cfbce05e2b9b48c860de46abd2eb") 14:34:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x700, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x16e0) 14:34:46 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x902, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x2a514ec, 0x0}]}) 14:34:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:34:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x900, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x16f8) 14:34:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) kcmp(0x0, 0xffffffffffffffff, 0x2, r0, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}}, 0x20}}, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x7fff, 0x8001) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:47 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80000, &(0x7f0000000000)="1aa81caca45379802470629a8f8a15e0d582671b83", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x10010, r0, 0xaf92b000) 14:34:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1710) 14:34:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xa00, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1728) 14:34:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xc00, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:47 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/104, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1740) 14:34:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@my=0x1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000200)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="fb73a84eecacb6a259b8fb327f22869f66067c34778a050000000000000045b0e4f1d780fd2a010800008e251b9e65e1f8b893e68a9a6bb1c209871e82b601bf66ecbb7112a1fd430d6a844bc5ea0b918a45eaa4696fcf0008000010000000000000000099a3ed4529522b8dc0db3179eeb93e6f10629b9acc663d5d2bd478e0d7b302a92849d9", 0x87) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xe00, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:48 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 14:34:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x3, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1758) 14:34:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) accept4(r0, &(0x7f0000000380)=@ipx, &(0x7f00000002c0)=0x80, 0x1c0000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000280)={0x0, 0xffffffff}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x422101) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000080)) 14:34:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf00, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 808.436387][ T4157] __nla_validate_parse: 47 callbacks suppressed [ 808.436407][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:34:48 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x3, 0x10001}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 14:34:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1770) [ 808.586775][ T4174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:48 executing program 1: clone(0x22102080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x108000, &(0x7f0000000200)="2e691de93f984b885a472e171ed6a8e97dfe738a856845381b5abbb3d00eb43c418170f5348fb848e07e6cb1ed81f672572854d589d7c0f8237e60cef2fa001f2b652eb80ceda7fc1032", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000380)="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") ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 808.742989][ T4164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 808.778593][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:34:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1788) 14:34:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x4, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 808.864875][ T4185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x3, 0x0, [{0x1, 0x11, &(0x7f0000000080)=""/17}, {0x2, 0xbc, &(0x7f0000000200)=""/188}, {0x3000, 0x9c, &(0x7f0000000340)=""/156}]}) 14:34:49 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x8, 0x0, [{0x3000, 0x64, &(0x7f0000000500)=""/100}, {0xd000, 0xff, &(0x7f0000000580)=""/255}, {0x2, 0x0, &(0x7f0000000080)}, {0x100000, 0xce, &(0x7f0000000680)=""/206}, {0x4000, 0x0, &(0x7f0000000300)}, {0x2000, 0xc9, &(0x7f0000000780)=""/201}, {0xf000, 0x3a, &(0x7f0000000880)=""/58}, {0xd000, 0xbc, &(0x7f00000008c0)=""/188}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x3, 0x0, [{0x1000, 0x0, 0x0}, {0x4, 0xe3, &(0x7f0000000200)=""/227}, {0x2000, 0xcf, &(0x7f0000000380)=""/207}]}) 14:34:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x17a0) [ 809.187571][ T4234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 809.357484][ T4239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 809.496513][ T4234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 809.529201][ T4251] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x17b8) 14:34:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1d) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r2 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000200)=""/138, &(0x7f0000000380)=""/71, &(0x7f0000000400)=""/217, 0x3000}) 14:34:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x6, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x5865, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:49 executing program 1: sendto(0xffffffffffffffff, &(0x7f0000000600)="4ed7a050a56de7fe89f66518a2d7485d4ee0229f08ed4add23e34e02914ac8008ca7be83cb0b14d68067bfe41a4d67f6824089de4cfcb8699751d1b37cd0f300e16688fe367bd9d843dde4e5ba4f89cf7ef8a9ea5102b1db5682386ad3783eb0cba10a8aba58adf8e1", 0x69, 0x8000, &(0x7f0000000680)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) clone(0x24080180, &(0x7f0000000000)="bbff8a414c81857104e12b873c6cfb8637e15c1a9f56e15f2273eb16e7ceb0f179c6ac59da0c2a5dfd0963463cd18adf0cdbad1bec5cc59db27aa3", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)="f4d486960bfac1b65986fde94094501aafd7b3fd78f56bbe331236d908236a7dea2b79b8830da765c1025dc18168d14ee14fc0a2ccc6257c15e5823cb7f6894b37199193fdf8b4e5ac3d9476a466fc5f49d12ff36bf416b61a380d4802c4865c27cf8ae947063a3ee95420f4ab00c07ac7fb7de7fad07a65754bb2cf4ac48094ddaf53b71d21740508d08fc0f8987064e80712538ee1") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f0000000480)=""/47, &(0x7f00000004c0)=""/177, 0x6000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_crypto(0x10, 0x3, 0x15) close_range(r1, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000005c0)={0x3, 0x9}) [ 809.775360][ T4285] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x17d0) 14:34:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x8, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x6000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x8000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x2, 0x1, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = signalfd4(r0, &(0x7f0000000340)={[0x3ae0]}, 0x8, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000540)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x22, 0x5, 0x6) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468146c36d8ad876f7d2e09707120bdf669ecf6658e516b37497d1f85b7e56dc3c21979a40e9f3d1342b60f1f40c665649d40def36812ddeb15cfeb0ad221af8615fd72f5636ac91e1d5523"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newlink={0x34, 0x10, 0x8, 0x2070bd2b, 0x25dfdbfd, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000a40)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900)='nl80211\x00') sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r6, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x30}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4044014) r7 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x270a40, 0x81) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f00000005c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x3, 0x0, [{0x2000, 0x78, &(0x7f0000000200)=""/120}, {0x2000, 0xd5, &(0x7f0000000380)=""/213}, {0x2000, 0xac, &(0x7f0000000480)=""/172}]}) 14:34:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000500), &(0x7f00000002c0)=0x68) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) fsync(r2) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="950000000000000018390d9fd1fb3c41f4620000000400000000000000080000005f1b0c00010000007d21f8", @ANYRES32=0x1, @ANYBLOB="000000000000000018000000060000000000000007000000183700000400000000000000000000001800000000000000000000000100000018180000", @ANYRES32=0x1, @ANYBLOB="00000000000000000c41fffff0ffffff"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x6, 0x80000000}, 0x10, 0xd172}, 0x78) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000400)="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") 14:34:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x17e8) 14:34:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x6558, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x9, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x2, 0x7}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x9c5a40) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x1000, 0x0, 0x0}]}) 14:34:50 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xeed8, 0x201) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24044845}, 0xc800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup(r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) clone(0x90020000, &(0x7f0000000000)="d9c18984b9c110c4235eb04547436c09e254", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000380)="ccb12a797d19037e47e4225e58b64efbc596437e66d540b86914dad4ed336da2210168ba5be7ac6a691953b52cb8c9e1eb08caf905c557f1aa3d611c8436f298f2af2a63fae42be5f30a4d070f9f74dcfe45f39695d6faf609363db53df4722f908216fc3a7402edfefd2a613ef93664abf1d786599db261ed02b74ccb63729855a0e7c6e85754461f71e96e754c3f1f96ce392691930a11d0ed6f6d31d12d5c29c90e71ee7efa3fd8120c7c463296b9a610e043f2d40f5f2e9ec08710c6bfcb7d") 14:34:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1800) 14:34:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000400)={0x1, 0x3, 0x1000, 0xd1, &(0x7f0000000200)="e5f1a9fdfd68e35d129739c8c207f10c1e04b50cc17272a33d424a4f5e29c5327b32e1bf113d89bf7ad83c3d232c4303be815ac3023ddf8916bab01ed886fe525fe5be1e2780d0c963c9e3d39e7a3dc32a60ac8cc412e4a5f080ee75de63b62436c66246f2b699a2479728c4fcdcbf6dea1dbd9b67487f4bd4092774d99e0720a668031f4e83a43cd5c8472f43546b5da0bcf681adb678be4e1468894fe7e1a4d462ea4f99b3382712782b526e0202d9b97ac4ed7505e6fe444d76aa47f6343f2abd99e419f8f1a425bac5ae58cdfee3f6", 0x6c, 0x0, &(0x7f0000000380)="d05533340122a729c995961fa938c3504b3cc6d021e8f2bda61fd3619d06c0353d8452b932689bd23b8edf2dc17517309de186bb404c8fd06c781bdff5cca96306fdd50efbcca52842dc6e3cb70cf68a327248ae201ac8feb6c47627764803fd57573fbc3565053805d582f0"}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x2000, 0x0, 0x0}]}) 14:34:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8100, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0xf, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1818) 14:34:51 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x430000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x88, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x9, @local, 0xd65}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r2, 0x400, 0x1, 0x3, 0x3f, 0x8000}, 0x14) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000480)=0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x55e9, 0x7, 0x8, 0x4, r5}, &(0x7f0000000340)=0x10) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x5000, 0x0, 0x0}]}) 14:34:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x30001) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)={0x6}) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000600)={0x5, 0x0, [{0x5000, 0xc3, &(0x7f0000000200)=""/195}, {0xf000, 0x78, &(0x7f0000000380)=""/120}, {0x2000, 0x19, &(0x7f0000000000)=""/25}, {0x1, 0xef, &(0x7f0000000400)=""/239}, {0x3000, 0xc9, &(0x7f0000000500)=""/201}]}) r3 = fsmount(r2, 0x1, 0x2) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000cc0)={0x4, 0x0, [{0x2, 0x9e, &(0x7f0000000a80)=""/158}, {0x0, 0x5, &(0x7f0000000b40)=""/5}, {0x2, 0x69, &(0x7f0000000b80)=""/105}, {0x0, 0x85, &(0x7f0000000c00)=""/133}]}) 14:34:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x60, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1830) 14:34:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=""/131, &(0x7f0000000200)=""/116, 0x0, 0x8576520af86e18b3}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x40000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1848) 14:34:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000280)={0x3, 0x400}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x0, 0x4}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@local}) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup2(r1, r2) r3 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000004c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000080)=[0x6, 0x1, 0x1635, 0x200, 0x0, 0x20, 0x1ff, 0x1, 0x1], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000240)={0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) 14:34:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1860) 14:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:52 executing program 1: clone(0x2c02a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000480)=""/147, &(0x7f0000000180)=""/106, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000380)={0x7ff, 0x10, [0xa3, 0x1, 0x1, 0x3], &(0x7f00000002c0)=[0x0, 0x0]}) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0x6000, 0x77, &(0x7f0000000200)=""/119}]}) vmsplice(r1, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c84a9cc5b9a0bfed199a0853e0a3806d3cd99ea02c612827e6514754608f0dae7cf6b7c8366a0fadb930664d2bd54595039a36684f54fbbe7ccd0c3c566337c3ed499f08dca6c9", 0x47}, {&(0x7f0000000540)="911f50f3a36ab0c5c823e91ffd88b91294464cd075678043493509cd79eeb4e8e77d4d1785dbaadf9054b4bab0ee5421f70528ee92f30e8ce7c5cf3a2e82c64d4ae84a20e2e53918fdc4262d2467a4d4941a915bfa90de8aa2f39f73a5d1d450be0aea2b3c7fd6a0a6ecac094c5ab691", 0x70}, {&(0x7f0000000140)="a68bd4963fffba0f7d08187c6b90c6557fec8daa08c1b3100af01068be41b4dd11362280d3c5", 0x26}, {&(0x7f0000000340)="081601122dadfc0dd05371b92fe97acfdbeee0b3e29fcbefbba1590a22845ce31ad95b3d2e", 0x25}, {&(0x7f0000000440)="f093d9e47d3a546d429b0f269025936b52f71b8fbce1661757c75367b93d6439996ac764b427e0edadce9da36a2b863eda8c", 0x32}, {&(0x7f00000005c0)="3a817dcaeb472bcfed83601a6767415987d463e53a10f8214882a7330d194e9574f049395a5d858ab3a879386c6da95f6fa104a6b1a22804c6681c62ecca5179d37fc80f9fb4bf7ae17e242dd123bd27ff8007d4632ca7ba6934aa29e7734ab7115e8ad5b7cfa7d8343659deb7ee2506f60431ab3cc12100cea13187d3ccbaccf2c45568ccb47c", 0x87}, {&(0x7f0000000680)="720814eb21c2e4a9de86efee4e4954c59a", 0x11}], 0x7, 0x8) r2 = syz_io_uring_complete(0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 14:34:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x2, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000380)=""/145, &(0x7f0000000200)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1878) 14:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000780)=""/198, &(0x7f0000000380)=""/137, &(0x7f0000000440)=""/69, 0x2000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x1, 0x25, &(0x7f0000000080)=""/37}, {0x6000, 0xc9, &(0x7f0000000580)=""/201}]}) 14:34:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x3, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:52 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x400200, &(0x7f0000000640)="31a5f55178a7e3b2030713289450ffd4184c02eb031570e7b7efc2d6197020aba4d9ea43b628b462257195d9b1b15fe10975309caeb1658701b9c9287b868b6dc1fcd144b5e81b1bc2c504a64986e7d3bdc60b5dd814d9ad3b6ea1315c128eca63ee2504acc05ffb375a10c47e205f25a89f4ee5260d32b25d0f80ad7443bcedac8216c7a3", &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="911fd7604d3c38369375a87f58c2e4f4c8510a5d95752295bf2288a3936fd7a69cdd52af9e76b177b25bcac0cc88695a6b13b44a193cc91188e2aa8add72aea7363b081acdc1959cda8350545760c2940dba94cf8c210ddc252230867888808a655e4c4cbb46797c168b5968aea0c66ebffbff4a0ccfe29d56c7cee8ec123238a0c699eda683b49eda27410b81c82f3e5c816a2f6025653edf6e3efa30ffa49855d92de0c48765e13d23dc21ef19174c5283867f4f024c34fc6e773bab5f0e3b3b46f367ceb73cae7f315f1d4f5d74499a678c8496dff50549b390e62d2743b05fea6bb66f13") ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x2, 0x0, [{0x2000, 0x6c, &(0x7f0000000200)=""/108}, {0x10000, 0xc2, &(0x7f0000000380)=""/194}]}) r1 = dup3(r0, r0, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x2000, 0x63, &(0x7f0000000480)=""/99}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r2 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000600)={0x1, 0x1, &(0x7f0000000500)=""/75, &(0x7f0000000580)=""/126, &(0x7f0000000080)=""/60, 0xd000}) 14:34:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1890) 14:34:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x16a) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0xfffffffd, &(0x7f0000000080)=""/141, &(0x7f0000000180)=""/107, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x2000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x4, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:53 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0, 0xe800}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x18a8) 14:34:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:53 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) clone(0x200, &(0x7f0000000200)="5014c1f8091b0ae96175a3f93b8603e57a03ab355e074fd36a39d715ba2b86ea384327723e280ea80b5781412b1b5fd0d6af5eaa1a9e311ebd0c0e0197d939f038a217eff27b08b901a0d49a0b62c4e0e21ba5cdfb886d76384366f3b60da8dddc8b94612c93a1e46a5260c3b7745d4470aeaea27f4e8d234643017f4b5fa4f1ba4f9138ed005c3200f7d942d0536588712e", &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) 14:34:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x6, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000200)=""/120, &(0x7f0000000280)=""/103, &(0x7f0000000380)=""/105, 0xf004}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x18c0) [ 813.463886][ T4678] __nla_validate_parse: 41 callbacks suppressed [ 813.463907][ T4678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x4000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:53 executing program 0: r0 = dup(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="02b5446128ca283c80d36070ee93cd2f792365d866421fea3818df8c9dc0", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x21}, &(0x7f0000000200)=0x8) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f00000000c0)=0x81) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xc) fcntl$addseals(r0, 0x409, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:53 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) dup(r0) 14:34:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x18d8) [ 813.662174][ T4688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 813.727678][ T4701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x8, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 813.830019][ T4702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x6000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8beb23f396fcc62f3a776201aba907a4", 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x18f0) [ 814.023997][ T4727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 814.157419][ T4735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:54 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) clone(0x70060400, &(0x7f0000000000)="92018a8328f0413282918ba5376add16c8aed063abb1bdd73d9b690d2d16c1eb43bc", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000380)="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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000240)=""/128, 0x0}) dup(r0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1908) [ 814.247832][ T4732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x9, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x7000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 814.341406][ T4747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.535163][ T4766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1920) 14:34:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000500), &(0x7f00000002c0)=0x68) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) fsync(r2) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="950000000000000018390d9fd1fb3c41f4620000000400000000000000080000005f1b0c00010000007d21f8", @ANYRES32=0x1, @ANYBLOB="000000000000000018000000060000000000000007000000183700000400000000000000000000001800000000000000000000000100000018180000", @ANYRES32=0x1, @ANYBLOB="00000000000000000c41fffff0ffffff"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x6, 0x80000000}, 0x10, 0xd172}, 0x78) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000400)="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") 14:34:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1f}, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) sendfile(r2, r3, &(0x7f0000000100)=0x6, 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 814.612935][ T4771] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0xf, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1938) 14:34:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1668) 14:34:55 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x62000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000380)=""/4096, &(0x7f0000000200)=""/160, &(0x7f0000000080)=""/44, 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1950) 14:34:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x60, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1968) 14:34:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:55 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x74) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000080)=""/7, &(0x7f0000000500)=""/229, &(0x7f0000000600)=""/132, 0x4000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) clone(0x200000, &(0x7f0000000200)="92c94ed5edb119c65783660fef2b14f6e54ca28a20e3de0fdbcf92c591eb550a022708ce90ed0104f3720d8c007e1daa6f76143851022b5a89baf05de6de76fb532321151135b383ef6b2bf2e2d9e50993d0225d43ff3a47822297e3dcb7e248ba06360e92864b713106389300c343106901c2b4c15360b443d09314dd5afd86396b932ee862476b50b3f7d74b15c56787a5dbd0fca8f3286d971afd4d0d6704495248448125a5c3dd5104aef86a0ecf2637af2fcadb547bb17fe8ad90d11cff51e1e9391682184a18b23b5148a67c4445d484fe611ded6cab1d84c40d982c0cd7", &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000440)="60d86fdd5862956f21104d5c7771b8fac39657d856642e39026ea134f60aea96a3c865366667f09fcf8806c3fbe5c72a93a67bb15ac14308bfdf3724fa740b4efe9449b4d8352f6609d0eae44e6e5b9cf40ef20809c45a76f650aea2462f39914e5acaca8a2dfe335967dbfffdf7db089ce91f682a3c49ae3f6b82843f933eae700a4df4b98413") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xa000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:56 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x9, 0x40000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x1, 0x1, &(0x7f0000000240)=""/43, &(0x7f0000000380)=""/172, &(0x7f0000000280)=""/42}) r2 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@volatile={0x5}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x59}]}, {0x0, [0x30, 0x5f]}}, &(0x7f00000004c0)=""/32, 0x38, 0x20, 0x1}, 0x20) sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) ptrace$setopts(0x4206, r2, 0x800, 0x12) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x109000, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/106, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1980) 14:34:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/129, &(0x7f0000000180)=""/114, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x90000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x25, 0x2, 0x23) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x1, 0x9, 0x8, @dev={0xfe, 0x80, [], 0x1a}, @private1={0xfc, 0x1, [], 0x1}, 0x7800, 0x7800, 0x9, 0x1544}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000540)={r6, 0x1, 0x6, @dev={[], 0x1b}}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000002ee40507800000f70000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100764574680a5375"], 0x48}}, 0x0) preadv(r3, &(0x7f00000002c0), 0x0, 0x20000000, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x3, r2}) 14:34:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2, r4, 0x3}}, 0x20}}, 0x0) 14:34:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xc000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:56 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @multicast1}, {0x1, @broadcast}, 0x0, {0x2, 0x4e21, @remote}, 'team0\x00'}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8000000) 14:34:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1998) 14:34:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xe000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3, r4, 0x3}}, 0x20}}, 0x0) 14:34:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1980) 14:34:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x19b0) 14:34:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4, r4, 0x3}}, 0x20}}, 0x0) 14:34:57 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x19c8) 14:34:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1488) 14:34:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6, r4, 0x3}}, 0x20}}, 0x0) 14:34:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x19e0) 14:34:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8, r4, 0x3}}, 0x20}}, 0x0) 14:34:58 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r5, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0xf000, 0x9d, &(0x7f00000013c0)=""/157}]}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x3}}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)={'syz1', "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"}, 0x1004) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x10000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x19f8) 14:34:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9, r4, 0x3}}, 0x20}}, 0x0) 14:34:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:58 executing program 1: socketpair(0x11, 0x1, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_delvlan={0x4c, 0x71, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2f, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x2}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf5ddddc431f15722}, 0x8000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 818.473672][ T5087] __nla_validate_parse: 36 callbacks suppressed [ 818.473692][ T5087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) [ 818.607308][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1a10) 14:34:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 818.784686][ T5093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 818.815933][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf, r4, 0x3}}, 0x20}}, 0x0) 14:34:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x42f9e1dd, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:34:59 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x208005, &(0x7f0000000080)=""/164, &(0x7f0000000200)=""/96, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:34:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:34:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1a28) [ 819.045054][ T5136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 819.191985][ T5140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:34:59 executing program 1: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 819.388662][ T5143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1a40) [ 819.440911][ T5149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x60, r4, 0x3}}, 0x20}}, 0x0) 14:34:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x60000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:34:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 819.684444][ T5192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:34:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:34:59 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) getpid() 14:34:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1a58) [ 819.823986][ T5200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, 0x3}}, 0x20}}, 0x0) 14:35:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x65580000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 819.970703][ T35] audit: type=1326 audit(1610548500.050:40): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5226 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1a70) 14:35:00 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @auto=[0x61, 0x33, 0x39, 0x31, 0x38, 0x53, 0x61, 0x30, 0x33, 0x30, 0x65, 0x34, 0x65, 0x35, 0x39, 0x31]}, &(0x7f0000000200)={0x0, "11448b1562f564243bf2cc2fae4b8b1a351cc31ff11efea66768345ddb315ce4a591d6aabd1b5ba5829c89618769d874a5a4e98f7bd81c59c8b11b5d88e81470", 0x15}, 0x48, 0xfffffffffffffff9) keyctl$read(0xb, r0, &(0x7f0000000380)=""/166, 0xa6) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) 14:35:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x300, r4, 0x3}}, 0x20}}, 0x0) [ 820.236900][ T35] audit: type=1326 audit(1610548500.320:41): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5248 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x81000000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1a88) 14:35:00 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ptrace$cont(0x1f, 0x0, 0x7fff, 0x3ff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 820.566691][ T35] audit: type=1326 audit(1610548500.650:42): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5275 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, r4, 0x3}}, 0x20}}, 0x0) 14:35:00 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) clone(0x981800, &(0x7f0000000000)="b5ff9ed9f65c36ff8d1ab719fdfeafabce6bad1651f40c352090d9fa38dc9c47f6149c826311d56676656a0651", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000380)="0c7b2bca557dd4e0f1886c9172c2196768bcd6c1ccc3046748933c3c21d46792897f2e34cd3318d72fef1236e4a78559a073331521b82382cbd95677c4c012071942ded5d9c3a467e727cc450e4b9d8eb76ed3770ea47734e209ccba1ea256624624f2f2fd942c787775666c71fa0f8ef1282aa4a2214294fd86d0cf9be4450694a87244c1491899acbf20fbd62c8d531c07cb7d25d111d42e980df383d0ba27db6148c1bc898ffd563637bce686a541fc0433957336203c5ec7ff2f63eb2515b5d0b7f556e8dd990184b2c8af57c027606d7510922c882314194236d9563d0d085c4a68427a170c") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1aa0) [ 820.871882][ T35] audit: type=1326 audit(1610548500.950:43): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5302 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:01 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000380)={0x3, [{0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x1, "666d574f161d18"}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@local}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001380)={r95, 0x0, "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", "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"}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000549c0)={0x5, [], 0x80, "5d5f08bf5a4620"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000549c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r381}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r380}], 0x80, "5d5f08bf5a4620"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052e40)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000549c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r385}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r384}], 0x80, "5d5f08bf5a4620"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000549c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r387}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r386}], 0x80, "5d5f08bf5a4620"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000549c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r389}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r388}], 0x80, "5d5f08bf5a4620"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053040)={0xff, [{}, {r127}, {r262, r164}, {r323}, {r99, r242}, {r64, r47}, {r81}, {r265, r342}, {r83, r101}, {0x0, r333}, {r227}, {r243, r357}, {r286}, {r308, r29}, {r129, r146}, {r159, r270}, {r267, r138}, {r260, r191}, {r281, r173}, {r324}, {r267, r190}, {r188, r100}, {r10}, {r112}, {r6}, {r304, r34}, {r50, r270}, {r155, r320}, {r341, r177}, {r13}, {r364, r143}, {r304, r134}, {r275}, {r250}, {r21, r296}, {r106}, {r144}, {r210, r296}, {r263, r187}, {r353}, {r161, r247}, {r255, r195}, {r229, r336}, {0x0, r84}, {r288, r251}, {r55, r321}, {r196, r221}, {r3, r280}, {r236, r344}, {r291, r68}, {r30, r202}, {r349, r258}, {0x0, r39}, {0x0, r71}, {r277, r2}, {r52, r193}, {r43, r320}, {r102}, {r288, r105}, {r43, r242}, {r19, r322}, {0x0, r5}, {r40, r358}, {r27}, {r282, r247}, {r189, r107}, {r323, r335}, {0x0, r5}, {r306, r145}, {r252}, {r87, r312}, {r140, r20}, {r334, r379}, {r41, r303}, {r102}, {r153, r242}, {r185}, {r227}, {r331}, {0x0, r215}, {r366, r88}, {r36, r95}, {r267, r126}, {r185, r31}, {r21, r373}, {r161, r195}, {r10, r171}, {r192, r209}, {r21, r317}, {r89, r84}, {r32, r218}, {r220, r283}, {r334, r375}, {r67, r156}, {r318, r327}, {r8, r249}, {r104, r65}, {r33, r336}, {r67, r111}, {r376, r150}, {r163, r31}, {r217, r309}, {r52, r76}, {r349, r287}, {}, {r81, r82}, {r32}, {r241, r212}, {r170, r199}, {r225, r86}, {r87, r22}, {r227, r154}, {r222, r93}, {r92, r307}, {r19, r298}, {r192, r212}, {r206, r150}, {r229, r232}, {r172, r72}, {r94, r78}, {r318, r257}, {r366, r336}, {r35, r350}, {r194, r266}, {r299, r303}, {r354, r311}, {r38, r158}, {r165, r363}, {r85, r360}, {r248, r224}, {r239, r62}, {r279, r319}, {r186, r152}, {r8, r307}, {r262, r300}, {r48, r34}, {r1, r201}, {r79, r289}, {r69, r253}, {r147, r18}, {r144, r249}, {r170, r162}, {r255, r360}, {r178, r160}, {0x0, r54}, {0x0, r181}, {0x0, r233}, {r291, r66}, {r33, r183}, {r370, r31}, {r36, r266}, {r206}, {r16, r66}, {r151, r238}, {r351, r24}, {r13, r101}, {r271, r338}, {r236, r272}, {0x0, r232}, {r55, r300}, {r370, r42}, {r108, r266}, {r40, r78}, {}, {r28, r193}, {r94, r292}, {r306, r132}, {r198, r289}, {r63, r5}, {r207, r317}, {r236, r42}, {r225, r358}, {r234, r90}, {0x0, r56}, {r120, r330}, {r167, r113}, {0x0, r329}, {r1, r95}, {r79}, {r290, r121}, {r213, r232}, {r61, r242}, {r96, r166}, {r359, r285}, {r314, r197}, {r92, r365}, {0x0, r123}, {0x0, r169}, {r310, r289}, {r112, r175}, {r194, r109}, {r361, r62}, {r282, r14}, {r297, r57}, {r137, r244}, {r58}, {r184, r219}, {r211}, {r353, r362}, {r376}, {r339, r256}, {r28, r84}, {0x0, r70}, {r315, r193}, {r180, r148}, {0x0, r264}, {r174, r143}, {r210, r141}, {r359, r119}, {r267, r193}, {r114, r309}, {r58, r268}, {r130, r15}, {r58, r119}, {r372}, {0x0, r134}, {r337, r258}, {r255, r268}, {r61, r322}, {r200, r26}, {r231, r125}, {r262, r335}, {r4, r319}, {r129, r62}, {r36, r53}, {r59, r91}, {r64, r80}, {r17, r12}, {r77, r367}, {0x0, r342}, {r315, r100}, {r149, r235}, {r99, r208}, {r45, r199}, {r94, r49}, {r295, r42}, {r122, r344}, {}, {r246, r233}, {r16, r226}, {r188, r90}, {r255}, {r130, r309}, {r250, r53}, {r200, r5}, {r163, r317}, {r374, r86}, {r165}, {r267, r296}, {0x0, r138}, {r168, r268}, {r10, r369}, {r356}, {r239, r195}, {r23, r289}], 0xae, "1745ffa905a6fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054040)={0x10001, [{r48, r274}, {}, {0x0, r355}, {}, {}, {0x0, r118}, {}, {}, {r347}, {0x0, r215}, {r252, r65}, {r243, r316}, {r40}, {}, {r55}, {0x0, r97}, {0x0, r42}, {r265}, {}, {}, {0x0, r152}, {}, {r116}, {r129, r216}, {r328}, {r376}, {0x0, r132}, {0x0, r256}, {}, {0x0, r128}, {}, {r252}, {r332}, {r127, r342}, {0x0, r249}, {}, {0x0, r44}, {r279, r164}, {}, {}, {0x0, r261}, {0x0, r218}, {r87}, {}, {r3}, {0x0, r283}, {0x0, r329}, {r133}, {0x0, r148}, {r277, r148}, {r323, r84}, {}, {r241}, {r260}, {}, {}, {}, {r147, r223}, {}, {0x0, r301}, {0x0, r205}, {r73, r95}, {r58, r11}, {}, {r73, r117}, {0x0, r317}, {r313}, {0x0, r237}, {r370}, {r40}, {0x0, r2}, {0x0, r258}, {0x0, r254}, {r115}, {}, {}, {r314}, {r99, r355}, {0x0, r187}, {}, {0x0, r278}, {r8, r14}, {r79, r335}, {0x0, r312}, {r293}, {r341, r193}, {r149, r242}, {}, {}, {}, {r281}, {0x0, r158}, {}, {}, {r116, r71}, {}, {}, {}, {r58, r166}, {r189}, {r211, r312}, {r4, r37}, {}, {r378}, {r231, r224}, {}, {0x0, r377}, {}, {r343, r340}, {r46, r321}, {r364, r138}, {0x0, r126}, {r131, r251}, {}, {0x0, r39}, {}, {0x0, r203}, {}, {}, {0x0, r309}, {r176}, {r341, r143}, {r259, r173}, {r139, r233}, {}, {r302}, {r17}, {0x0, r202}, {}, {0x0, r226}, {}, {}, {r245, r141}, {r50, r258}, {r351, r371}, {0x0, r357}, {}, {r299, r276}, {r81}, {}, {}, {}, {r75}, {r374, r51}, {r290, r20}, {r345, r240}, {r139}, {r368}, {0x0, r201}, {}, {0x0, r109}, {0x0, r294}, {}, {r142}, {r306}, {r271}, {r196}, {0x0, r325}, {0x0, r244}, {0x0, r74}, {r214, r5}, {0x0, r103}, {r204}, {0x0, r283}, {}, {r275}, {}, {0x0, r39}, {}, {}, {0x0, r164}, {r179}, {r63}, {}, {r99, r93}, {r21}, {r135}, {r299}, {}, {}, {0x0, r171}, {}, {0x0, r160}, {r139}, {r96, r317}, {r149}, {r89, r84}, {}, {r332}, {r326}, {0x0, r249}, {r302, r330}, {}, {r182}, {}, {}, {r85}, {r185}, {r40, r7}, {0x0, r136}, {r124}, {r110, r309}, {}, {r267}, {r374, r121}, {}, {r284, r86}, {r180, r228}, {0x0, r9}, {0x0, r150}, {0x0, r175}, {0x0, r352}, {0x0, r346}, {}, {0x0, r305}, {}, {}, {r334}, {}, {}, {r282, r348}, {}, {r196}, {r315}, {r323, r352}, {}, {0x0, r287}, {}, {}, {r16, r98}, {}, {r279, r230}, {}, {r129}, {r25}, {0x0, r60}, {r35, r253}, {r248}, {}, {}, {0x0, r191}, {}, {0x0, r113}, {0x0, r367}, {r380, r382}, {r383, r235}, {r324, r385}, {r182, r305}, {r106, r240}, {r273, r387}, {r388, r261}, {r157, r348}, {r269, r298}, {r390, r216}, {r157}], 0x4, "ab13fdf4c13e3c"}) 14:35:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 821.073317][ T35] audit: type=1326 audit(1610548501.160:44): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5323 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ab8) 14:35:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) clone(0x10000, &(0x7f0000000400)="3161bc4b8129722066eba0738277fc5b8807401b80dc5154a7f5fdb2b0edd0b94533f87d6229805a2f8ab854a6e2c42fdd1f1984dff262a01179c9a155ebd504de99afbc5427480c3aaaf14b365dcc91b18e0fd4fa2c705c2c094a5c2ce4a2ce618e4496a59ceee674a3e80ce27a01e24bc3998d951cdc0e95e203b18eab3c087edd67ec157d3ffc4d2d313cd26a7a2ba9c2fd05434d95d28165318b2b675a529771e97c53fa4096fe90c71ee403581682572690824d5572a9664fa39eaabca45986ffb70afa1b3c42db776eb2c85bd9fc92a82e99f418433c9bd1f375ff558692a0431ada4a985d962ccf2170bd84edb3983dcfd90eae8dd72f9c82799532d20db6fc7232849bd735f55c051a81f9cb7ead8c86a0fffe5312ee5831e5459063c344de01e844e0b99d3a3239d484556342c4612c4b9642578a1f9cee394e671ecf50532ea69716e56cebd0406616fddd1e2177859617cbb0f46277365a81fb5a481f6286e29fa4a53f36d5057ace3b0515868136933ac8665de909547edc8a90d473ee3e2fb65f710c1bb2d34c72f0439c2750abad5e96d8a90d4d2c13fff8cd48b08d7b2b155f6a011972240ffb21812ef9b9ab39dc893dec35c884056aa89a13868abc03b86e91d170657e078acfd25a2a3ef40ef2d7b43dc68e401e0989823a6a07b8c1c57d3c5756de07cdcc3c638eeeebab5c5561a4c22066cec1ae8de517b15fbc8c0f2e2e8f5ead90ab3a8f6390a342963cf92715a0e0453511ef2838fb456f220cb26f9b7c504e2ad26c3857b182e8290c2b23f48bc1fb44f0568ad6501d913aba489477ba2ffcea2bf8bf9cb730ae7153186305f1e50ecba349882f3eda6cf9af0838319b94d5faae56dd8362883be36334f44b9b3ce985f24b8780380e03e35f1395f8f1153daf37430b67afedf8ce30925770ebd6bd07be2276cfdc4ce3a4d3f66ad0839a598389df90a95c588588a79b718b734b769e09b1ca8310738f5f4827c3fde1d542aafe074cf35ead1420d9e0c70473d422f42a44924eb0c11653714def25e16f0261ab9835324437704b055798fea188e10a6e271ed4d5786b3ea69deb5f35893f4ad11ac50f3d3e41e10ae181d795df014b3a68dfe9e98f5b4c91573569f1174ef7fe6cc925caa374091725f5ab374d44c42928f2caf8f49dc274a488ba205ae26c0174433e6f8eec6b4869d66ca756b2767f5ecbcc53b3a3e1f6eeef99fa4deb294d9d1507dcca610df8ad5b4a1ff3c6ba3f3fbaa1c7408a232744ed9185ce76bd0a47afc9459a3a4f7aa26a1f178d0377fd9f61dbb8031b9e654678c35cbb17231dbc0094f054d279bc9ea65e33fbd0b3058539d9c8bedf67274b41b1c24951f06d44b6e00991a9229a118e20e7eb29c086889720674deb44d63851d41f26a76f661a872f75006dc3b1082598332f9b1561a3657ee3d2b29b6064c1991814adf00690a94dcd8e24a41b2fdbd895fd0e44b57ab4d996c8fa459a78735348fb5d08d50a3a39142884693f690b73307f586c0187ef0390d25c36ce95614d0216551190658b81b9e3a0fa17d5494bda8729a41a8f5a5befcf4a797b779866ca54e75db00fc15b70954adfda1e038f793f83fc1875d5104d4ced6dc06849d79a6e1d982778976b23af6a974e4b38795281126614941effe7d7d4f5980e19254f13772f6fbc3b190c67756eb6c94c69a96a87ba6da6eb3e6f5d4d8181f4cf41f308f57f09e2089b6103a2429c1b96ddedabcf443bf4c5efee0d7509362f097f35259a600492f0470d5f1b1cd72da93daadd2d6591ddea647b58a440ba1cd9a8328cb225f5f24cc2d6685a5a37d2f035e58eb2b7a1d114b9c05cee6cccde2dbcadd7a80c4b016e1286abe8d425627de6276aef874d6858eafa2a7bf6b62e8eede333e1030436b9343a001d628e669303d6e320c339af3960f92421469703357fd419d2fabee09e979931b1555afd4e2e45cba022c690f9abebcbe2db371088f4a7c7368169e29ba0b4c2550593b5148124df3247c019428f5fc072de3cd70558d335ed14db57d38e8ed4431d5f6e7ac17c018af68d3a898fccaf486b5da66246b79593d45782adc809d06b462fdd3fef35b9c335bec383d0dcec27c9868aad1cab6469d98cebbe0a89295cefaba04f200c399c98ff666ea94b29fe81634ff005f8c1014b229171dbb84ed161de607b0ca3033fb7ab2fcb1581b6d082a57883b37f377f1ffb58b11d4b6a7f887d5afe14a7d7982f95e322d56071f0be0c77369c0ccfda56a2d497cdeb68ee2dfedbc6c21c7e4942a66ab59c07ed9c7ec64f00ac1783d32754e2fc07ef1dc93c7672dcca7de25e877573b9355f94764ccecd509729a3d4762c00c90dd36f3522444384b874ff34370858e52b7211f8239af502169879f0c2ad4c9bfc7200bb8ab48522dfdffdda08a335b3c25dd94dbe94f8d44415635f3b064e95fa24178f23896135db863a91ac4a2d93fa14f73e2bae79b4da5d5352eaad552fa68047837514bf03009dbdca7d6eabeaa6e25e1ff4fec5c69f3484680b553b7f7a10c098b54aafb99a6f807c6ff10dd0e03806cf5355aea26e1599824999b4ca2d1923f86c9d3c55715e4f7bba14c047a02bc173b5b887da343a42379cc1862b2f357b8dc7ebb5b4e07a3a356b338d39132690a8a94ad884f94fcfa43e35f32d8c056147d350b785e53aca3a75f8689cbd64dd8a951ba42e8aa125efaa88e3863fe048689cae4bb47702192b21de85ebc4384f65eb50d33067eb5502396ec28d1f2c9073868a2ef8d8fab93d2972e6ad95219447528de904f7f9b2f899e942cd4cf40f2ea7bbe3261a10b68525cbfffa81c507f2c7331155dca3bdbcfb8ee6cd48bc6afcd1e1c3fad9b9909a1304f0e48f67f225bf4c1a18d7358bd1a5d54139787a257b7f63798642a0be7bf545dfca4b2a592bf55bacf5702f0355d3f19fd6dab1a44cff30949dd728d8ce400d1d84a71940ed7ff64a5800d5c82907a6d3cbd1ca88b11f5608a8e76ed6db37023030765933fcf017dcbbaca27c8657fda568f161f7f18609c5e428fd8e864f6d0009af42d5e3ed4bd46b041cbae936ceaa86e727e36608ef19b9d6613954858dabb9e6b1d1067513e5e8c147dc6fcef67552d62c277d64c717954de63498a9a4245f940dc80f3ad68ada105ccde0920c6eee9db3ead1bdc46ab381d957396d0ca2772de16a5bfc750b7a50bde52cb226940ccdf1fa2a370ab7cacadbd7f5c45473124059b58d97c6e3da9253a95347609fec568f227cd9456ffaf8d4109475db88049752c7e4107738be9ca600f98144dbd9ef63ba7cb55691877babc1af9f018599ead1efd0fb78e46efb2b7ac27c963cc305ee9db6023ff94af6be9f4697b39079ad2fe97dafe41ca7dc6bd6e1317281aa4136f1e846a0d0772b2d1eeb7864ce86a1f7314b4735ab33f9c17fd82003382e22d23b42812aa145ca539875fef7154ab2a99a991f8fca4df31999d6160cb8dbee613e99f22bc7c663fb7c48a25b2f887867d4d0c73c4b11e41c8a73cd9cd1b064f6559b60f25c7015da9743d8faa82b527b3d7fec61f3f455a6c901c25093e258754a060a4829837c69e9070a371159451d56e67b0a3b1fb61fde116387e1933ed1cc3c18c5bfbcd44b90d3c52e0d340debd6750ac34966f3aacca97db7a9d5f8a6806f9ff39e52ce522c26c5803e5d9ff75581b0c7ac6d2b3967bc3e86cfcd5655cec1b1be73be288cc58ec66c7acb2bf7145c031c57d0808190451bd9ec09f4d3aa68e0286b5f489be6cc27103dcdd59a61e643f39541a62e82f2dd173ba8374544307bdcd2835bd290c0e53d88df4863c0bb39cc82a21a927da01bd1c2e6143a5ab9ef2738b1bcc9f4d0d8463c2f34215e2fb0cfe77468df82d34647c321ea70585bd98c21740e73a3dae0cea580f33ad943e7345d618dcfc4cd118281905236e1466f051aca558ffb4e8f6d0979932a7cc01aef30ebcb59d8b7fd808ae8856c9abbad92a08805eab887b588e675a107e00613a3a0d019a22c23df341daae7f7bc94397477cb404be339b6202fd7b763027de4ab6dee10b47ede4d598d0c4e9a218d8c68917649032e2c11b1980f260be2658894990511d1df0dee6658d15b4e74eea172174fa591160521a4de845bbbb7bae018e707054895681103e92d308f16173dd47b11ec68de22f362b0267a26153fa8604bceaed6940c5622018dcee519c2fa32167961bad81453ab4b7015feb7099e0bce141d92ab25435af07d652509a5cf814612a187cafa3814ce65191bbb9f9085bf1b368e4cc3de18fdc8532e7c5b6d897a27b42644c2c427cc3339edcf00d639530ee3ee65115b4848f8dbd1c36eebe1b593e747a17b122d09034f5a3d62f8f9a485a5905e862486394a6bf6a340f86f13b6abb0e5041d885f6f252577a8f62d68cc72094ca58a4a02884d026a0cc50e2fea58f9bb89165fb3d229a4809c98c7874796281492b3f245d7e0f247fb2b47516d51a2a5a53cfc9b66bc31c37fb1ebd80bf9713a94bdcb7ad72bdc2b57ad7e6ab55a316f5ae8506088248611c6dee942a64a54251ca8c22f067b49e8c7fe1b1e735a74645b78d1ed2d85e2411cdf510397faf100f4ee40b53f44c0669832096a16b0045fd2358128c617c70c4d9865c2ed412479a71173bd05aa5d4b367c63081bedc64e310167f8452b13eab527f02c94b932c65f94870de16d93a7be280eeb0fd7d7bf3e5797777c193a01733dd3551e72691ae8c3d64ff373a8b617ee196eb2f9486a3e55c9072c84453a8b7555d0a1866f7ef7869e18b2a5076be6ae10f7be5c6d58dc1394c495b2cac284fcf5fafa4431b0b90aa047393fc4602e2f39508c324eafc91a9a68e6dec1f95a9ecc186b0f7dc584d959a7835d78c6fdf328b71856dcaaf1b4eda3313b2d5910021b6d7b6ad810bcb4765cae2345149d2e6f608ca9788136ce41d255125eaf705b97213045398153c2d1a2497bfad1e38ef6a0a92811f72299cdc411fbfc7b47b11911705f456c71d51fae59562ede49211377af5520466d09c299382cc09df497c731b6f182d3a55403f4c62a44d6e4e83e698d4f92471a0be0f823df259d46caf62208a282fc02994815dda223dfd1f584e5f7a63d6353fc913b680f2f48479cae35a440460c495752925a5b01a1a714ef7c85c7cb32431e53d252a075084120021edbadc17fb3245b8ca0677538ae66b289e141e6acc3e714a497937c265828d3bff51d90d5d44f53e4d4dd8202f2c9b282c31bf582e30d39c8cca8d421bc2a5cf52a22a382353bb675f034a53a1f1f3206c5742562261b67488652a3e2ac65b6b7f6b4bd0a34291318b3485959dab8ad0573d2eadfbe4f5d375f7a3e7982cf6701991a63a5b5ee13a4f0ee265329c51ccf6ba1ce9f55c135a8d2e067f5bc3364b9c2047b3def3039c9148114879b10b53a8b2a56de4c7642307aa96c60b535ecd5647f5087355ac1203de346becf4f350dd30d02553284c20e2da4ae707736b871271b20e575c6ba97e6c65a66c4aaa4ca226b8f780db04f97bd6e45b6c897408436b78d2ac7cb2b353fe54733304f0b12f6b26c00d64a9bd7a5da68e97681bbd0fc4a5cce709a360718404a9315719686b93d88cf2a9e5780691a170d77479a5309339aec098125ec6ed414bbd0cc221b51987a7f95c9ff4b28baf62a3615192c4bf624df6dc762a0884ab3d211e5b543ea45648625ce91f9f77442b4f7a7d01814f1986fb817f6e095d7403c6dab86805876c55459a29145df1d", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="973944b18a54cb1de3cb18f405242c94f0623b85b10b30038fdb723084e33332e57fc5aca9a01d188bac747a4fefacd595fd") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1004, &(0x7f0000000340)=""/146, &(0x7f0000001440)=""/123, 0x0, 0x5000}) eventfd(0x9) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000140)="fe277214b578af6f9a1f60787ac9ba39dffa67b27739aeafca01d69f1747889130c4a63ac7ff49d1267c30b2dc6abbbe2266c41f1ad465dd0a5c53778ce3dc56dbd2ebfdc813172da3f0559fb29df3a591e89efa6d31a3e8c6816bfa3405710bfae4a5ab607b1a39d679b365d77976347eaa2a943409737b7cf2e0c38969f9fd67caa1b1a2fbf8fa9010188279", 0x8d}, {&(0x7f0000000280)="55884bf80b5fa7d7a5bb14a4366ffaa06bdae38aa52046b9da1f48b6d735cc0b3c9138a5b86aa46af9fd557706ebeefd1f56ad6faf611a2c6134a70fc1428c88538bb8cd473bb8cf3560fa05fbcc513f2cf644706c418450be28017475d82fff60b2c667861283", 0x67}], 0x2, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3c}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0xc0}, 0x40000) 14:35:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7f0, r4, 0x3}}, 0x20}}, 0x0) 14:35:01 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=""/145, &(0x7f0000000200)=""/119, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 821.319661][ T35] audit: type=1326 audit(1610548501.400:45): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5345 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 821.502365][ T35] audit: type=1326 audit(1610548501.590:46): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5353 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xc3ffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:01 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = socket(0x10, 0x80000, 0x0) ioctl$FITHAW(r1, 0xc0045878) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)={@my=0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000507800000f70000040000000000", @ANYRES32=r3, @ANYBLOB="0000680200000000c96675ca1ccf1fcd6e082adbd0ef1d44406bb544dc58877fc80a8caa09e42d83c826599e342f21bd6e2c7fcd8fdc23b597dd65fe1b38d36c3b4a5d28e301c4a8c552ce969ba568e86352a7002db5e2711c499b0ee3015e3b59b3048e"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ad0) 14:35:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x900, r4, 0x3}}, 0x20}}, 0x0) 14:35:02 executing program 1: clone(0x4140280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ae8) 14:35:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xdde1f942, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf00, r4, 0x3}}, 0x20}}, 0x0) 14:35:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1b00) 14:35:02 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x30000, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, {0x8, 0x2, 0x80, 0x5c, "82f0deea4f47275ba9a6d605e575b574cff37a862d0979e3cd8623f211f8c50c9a5344c61df0d2756cc0e7a7abf1f39080c2b7dce7a55c13329298452c32bc23a8c499ee953a7d51a63521dad9c498723621cbe43a92e8943b3fd9a1"}}, 0x68) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000, r4, 0x3}}, 0x20}}, 0x0) [ 822.558210][ T35] audit: type=1326 audit(1610548502.640:47): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5455 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1b18) 14:35:02 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tkill(0x0, 0x29) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/meminfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1, 0x5, 0x200) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000300)={0x9b0000, 0x1, 0x9, r0, 0x0, &(0x7f00000002c0)={0x990a95, 0x8, [], @value64=0x1}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fb82, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) ptrace$setregs(0xf, 0x0, 0x80000000, &(0x7f0000000800)="b35dbb5d2b939d79260e039b9087e69e3ec0c7d93f9f042e78bbbcd233928b0511462d12ebd60dba9a3b2ef4fa1b7b9c37bd87e5bceac419dfbc95d2496eadb0d6ac891c47f0d212e2fe7d8fb04c9f9d79dadc683db41f8a2cdfc24762a3c2fc71ab4d71df0a07867fcdd873c95025cb87c61a26e0") r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r6, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfcffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6000, r4, 0x3}}, 0x20}}, 0x0) 14:35:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1b30) 14:35:03 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) syz_open_procfs(r2, &(0x7f0000000200)='io\x00') ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfeffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8100, r4, 0x3}}, 0x20}}, 0x0) 14:35:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1b48) [ 823.523023][ T5531] __nla_validate_parse: 36 callbacks suppressed [ 823.523044][ T5531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 823.578609][ T35] audit: type=1326 audit(1610548503.660:48): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 823.674080][ T5532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1b60) [ 823.796675][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 823.817191][ T5536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf000, r4, 0x3}}, 0x20}}, 0x0) [ 824.027383][ T5563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1b78) [ 824.173268][ T5565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 824.317119][ T5572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 824.345747][ T5567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1b90) 14:35:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf007, r4, 0x3}}, 0x20}}, 0x0) [ 824.607085][ T5594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 824.636619][ T35] audit: type=1326 audit(1610548504.720:49): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5596 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 824.742875][ T5598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:05 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000019c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001880)={0x9, 0x0, [{0x4, 0x4c, &(0x7f0000000200)=""/76}, {0x100800, 0xab, &(0x7f0000000380)=""/171}, {0x2, 0xd8, &(0x7f0000000440)=""/216}, {0x10000, 0xe6, &(0x7f0000000540)=""/230}, {0x5000, 0x7e, &(0x7f0000000280)=""/126}, {0x1000, 0x1000, &(0x7f0000000640)=""/4096}, {0x5000, 0x50, &(0x7f0000001640)=""/80}, {0x4000, 0xd2, &(0x7f00000016c0)=""/210}, {0x4000, 0x84, &(0x7f00000017c0)=""/132}]}) 14:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ba8) 14:35:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r4, 0x3}}, 0x20}}, 0x0) 14:35:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x194}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x91d}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002cbddf250200000008000100000000000c009967040020e70000000000000c000500"/46], 0x34}, 0x1, 0x0, 0x0, 0x854}, 0x8880) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14044040}, 0x20000050) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 825.453339][ T35] audit: type=1326 audit(1610548505.540:50): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5624 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x0, 0x8000000}) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000080)=""/29, &(0x7f0000000200)=""/175, &(0x7f00000002c0)=""/63}) r2 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x3f, 0x37e493465149696c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)) 14:35:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1bc0) 14:35:05 executing program 1: clone(0x8303080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=""/160, &(0x7f0000000180)=""/119, 0x0, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 825.687779][ T35] audit: type=1326 audit(1610548505.770:51): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5655 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x2}}, 0x20}}, 0x0) 14:35:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000000c0)=""/144, &(0x7f0000000280)=""/119, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x100000003, 0x0, 0x80019c) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000180)={0xe0, &(0x7f0000000380)=""/224}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x400, 0x0) fchmod(r4, 0x20) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 14:35:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1bd8) 14:35:06 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x100000000) [ 825.956172][ T35] audit: type=1326 audit(1610548506.040:52): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5669 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4}}, 0x20}}, 0x0) 14:35:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1bf0) 14:35:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:06 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0xc0482, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000440)="66ba6100ec65490fc76b600f07f30f5c3066b8e6008ec80f01f80f0b66ba420066ed0f30653e440f79b3c51f7aee", 0x2e}], 0x1, 0xd3, &(0x7f0000000400)=[@cstype3, @vmwrite={0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}], 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001740)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000480)=""/4096}, {0x1, 0x50, &(0x7f0000000280)=""/80}, {0xf000, 0x76, &(0x7f0000001480)=""/118}, {0x3000, 0xdf, &(0x7f0000001500)=""/223}, {0x2000, 0x78, &(0x7f0000001600)=""/120}, {0x0, 0x9a, &(0x7f0000001680)=""/154}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000df070000"]) r3 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000080)=0x1) 14:35:06 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/134, &(0x7f0000000180)=""/105, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6}}, 0x20}}, 0x0) 14:35:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffffc3, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1c08) 14:35:06 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:06 executing program 1: clone(0xbff9e273356b06b9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1c20) 14:35:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10}}, 0x20}}, 0x0) 14:35:07 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x3, 0x0, [{0x2, 0x76, &(0x7f0000000200)=""/118}, {0x2, 0x1, &(0x7f0000000000)=""/1}, {0x1000, 0x38, &(0x7f0000000080)=""/56}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:07 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000200)=""/122, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1c38) 14:35:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x25}}, 0x20}}, 0x0) [ 826.992046][ T35] audit: type=1326 audit(1610548507.080:53): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5776 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:07 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x10000000b, 0x6, 0x80000001) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001480)={0x4, 0x0, [{0x6000, 0x73, &(0x7f0000000200)=""/115}, {0x4000, 0x1000, &(0x7f0000000380)=""/4096}, {0x4, 0xf1, &(0x7f0000001380)=""/241}, {0x2, 0x4f, &(0x7f0000000280)=""/79}]}) 14:35:07 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000200)=""/208, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/193, 0x6000}) 14:35:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1c50) 14:35:07 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x2, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000200)=""/196, &(0x7f0000000380)=""/233, &(0x7f0000000480)=""/218, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4001}}, 0x20}}, 0x0) 14:35:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:07 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x7ffffffffffff50, 0x0, [{0x0, 0xfffffffffffffe58, 0x0}]}) 14:35:08 executing program 2: ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)={0x3, 0x2, 0x4, 0x800, 0xfa, {0x0, 0x2710}, {0x5, 0x1, 0x1, 0x0, 0x9, 0x20, "fa7a423a"}, 0x9, 0x0, @userptr=0xfffffffffffffffb, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000380)={{}, "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"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1c68) [ 827.981095][ T35] audit: type=1326 audit(1610548508.070:54): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5874 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:08 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 14:35:08 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x17, 0x204101) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1c80) 14:35:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x2}}, 0x20}}, 0x0) 14:35:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:08 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x200000, &(0x7f00000004c0)="080d6d98c7e8549b336adcee26edd41fbfa8f8ee26690138e76cc465ff75eb7fdb6ff9b900fb0e324246cc2e9b44e3f74cbeb6cdaaa829feee96a128bbd7532b22b13edd6d23b3ef9f1337dcc742f1ece88fa9c9f1f219a6522a96f94360de2a3084286c7813c7e73f3388bb3ddd9270c0d2e4187c14869e4e2be5539dad822f887744a71c2d4423f637cd0dca33490541c1acd5e49fcb381b0f4d6d02d2977efac27fb046686bd0d1f9a25c6d08a02c23a920624e08c00663efc20a70d2681cb0ea22656049c417ae952ca8a5d208390893037f6e3313fa30df09a605a04577ff11", &(0x7f0000000080), &(0x7f0000000300), &(0x7f00000005c0)="527da75a0d9af06f6c977faac735d95f604ac0f372d9001bd653a4601e3244c0b6fb07a5d84cbd518a01e2926de1add71c2b1ea94454fc24733b4af01fc07e77b627fa77c75a1b482a1953c56ab40233f4adb634ce19fcc22962864175f520f6d34d6d06e1baf3d80236001fdf776532b91710fe540d0d584bd885ec213293be92e5384835f955c7aa28d6547dcdeb") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0x0, 0x0, 0x0}, {0x10000, 0x7d, &(0x7f0000000200)=""/125}, {0x100000, 0x52, &(0x7f0000000280)=""/82}, {0x1, 0x10, &(0x7f0000000000)=""/16}, {0x2000, 0x69, &(0x7f0000000380)=""/105}]}) 14:35:08 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@hyper}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x0, 0x10000}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000200)) [ 828.821904][ T5959] __nla_validate_parse: 32 callbacks suppressed [ 828.821923][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:09 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}}, 0x20}}, 0x0) ftruncate(r1, 0x4824) 14:35:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1c98) 14:35:09 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/104, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 828.947670][ T5976] ptrace attach of "/root/syz-executor.0"[5974] was attempted by "/root/syz-executor.0"[5976] [ 828.975107][ T35] audit: type=1326 audit(1610548509.060:55): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5971 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 828.997873][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.091247][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 829.111278][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.135875][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:35:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:09 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/140, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000200)=""/197, &(0x7f0000000000)=""/35, &(0x7f0000000380)=""/4096, 0xf000}) 14:35:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x3}}, 0x20}}, 0x0) [ 829.284396][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 829.300781][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.378205][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.425884][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 829.511810][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:09 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1cb0) 14:35:09 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=""/158, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x3, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:09 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xff, 0x53, 0x0, 0x1, 0x11, 0x1c, "a5ca5795b343b039a37bafab0fd994f5b5c961594a86cf62ab26082e3e5846376e6a19d5109e8c44da01ed8cae42ed8bb9831b74d518d0b5a231d74b3fc35c7e", "e0fb1848915d1a2ffc4890e6cc45a8679a75b408629b36fd26af8d946a16296b9b8e1cd04ba370173b967d14934473dcb995d1f8ed062ff2f0ea743ef56e9112", "ab0aea47fe07763ef840f7826fca471c8c4c90cceb7f425e29e9e4dde8cf923b", [0x7fff, 0x8]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x4}}, 0x20}}, 0x0) 14:35:10 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x410, 0x4) recvmmsg(r1, &(0x7f0000000240), 0x4000000000002c5, 0x2, 0x0) getpid() mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000580)) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') r2 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) sendfile(r2, r2, &(0x7f0000000080), 0xa198) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x4, 0x1000, &(0x7f0000000380)=""/4096}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') [ 829.910942][ T6079] ptrace attach of "/root/syz-executor.0"[6072] was attempted by "/root/syz-executor.0"[6079] [ 829.927072][ T35] audit: type=1326 audit(1610548510.010:56): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6063 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:10 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x80801) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) r3 = dup(r2) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x2, 0xfffffffd, &(0x7f0000000200)=""/139, &(0x7f0000000380)=""/124, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1cc8) 14:35:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x6}}, 0x20}}, 0x0) 14:35:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x4, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 830.041793][ T6086] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 14:35:10 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:10 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ce0) 14:35:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x6, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x8}}, 0x20}}, 0x0) 14:35:10 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@host}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:10 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80002, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) getgroups(0x6, &(0x7f0000000580)=[0x0, 0x0, 0xee01, r4, 0x0, 0x0]) fsetxattr$system_posix_acl(r2, &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x4}, [{0x2, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x4}, {0x2, 0x0, 0xee01}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0x6}, {0x8, 0x5}], {0x10, 0x4}, {0x20, 0x6}}, 0x64, 0x1) r5 = openat$cgroup_devices(r2, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000006c0)={0x2, 0x0, &(0x7f00000004c0)=""/48, &(0x7f0000000500)=""/172, &(0x7f00000005c0)=""/238, 0x1000}) dup2(r0, r5) r6 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x1, 0xa01) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000240)={@my=0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x3938700}, 0x1, 0x1}, 0x5) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:10 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x2, 0x0, [{0xd000, 0x0, 0x0}, {0x2000, 0xd3, &(0x7f0000000400)=""/211}]}) [ 830.844502][ T6150] ptrace attach of "/root/syz-executor.0"[6146] was attempted by "/root/syz-executor.0"[6150] [ 830.868935][ T35] audit: type=1326 audit(1610548510.950:57): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6144 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x9}}, 0x20}}, 0x0) 14:35:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1cf8) 14:35:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:11 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80004000, &(0x7f0000000200)="dc08e28232eeea57bdb351e9adff8116b2662b6753449cde51c7466e4088d61ff756be8e045de00c117561d3a79084fe60e1b3d8eda190e00d39112e04974478818fc26914707786442cdadc2e119bd889af5ba809d9cbf2e57265f146249fb6b618ee241ce86758dfb0ab37dfdea4fbc5766cf1ff2014c0", &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000380)="a72f7eec190d082115f528f7df4520f999245ac9fe7c6642be724ef895df2e09a8dbd4d78190514c0bb85bc01dd7e0b3dec7bf96480b0d51f528aaa95f5c1692572e352a3ae1180f1d85e441da94f3369262210a757e40ce4f4c45a8b91e6000c94d416103625727d3e5bd329c017521d620a3dc3b911435efbbd9cec08a1505c2b7e44dc2cf898d9fae0fa367b43a9533f09d3617d74c94629b7f05ff3241be000822797116a4fe8a12c1f17ac645bab2dae92756703528ea5848159400d52010730778610f17ec5ec2e245b2ec") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001780)='/proc/crypto\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001640)={0x8, 0x0, [{0x5000, 0x2a, &(0x7f0000000000)=""/42}, {0x1, 0xcb, &(0x7f0000000200)=""/203}, {0x2, 0x29, &(0x7f0000000080)=""/41}, {0x5000, 0x1000, &(0x7f0000000380)=""/4096}, {0x3000, 0xf0, &(0x7f0000001380)=""/240}, {0x10000, 0xf7, &(0x7f0000001480)=""/247}, {0x10000, 0x3c, &(0x7f0000001580)=""/60}, {0x10000, 0x7b, &(0x7f00000015c0)=""/123}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1d10) 14:35:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf}}, 0x20}}, 0x0) 14:35:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) dup(r1) 14:35:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x8, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:11 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)=""/48, &(0x7f0000000200)=""/255, &(0x7f0000000380)=""/4096, 0x2000}) shutdown(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x9, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x60}}, 0x20}}, 0x0) 14:35:12 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/mice\x00', 0x20000) mkdirat(r0, &(0x7f00000004c0)='./file0\x00', 0x100) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x4141, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x3, 0x1, &(0x7f0000000200)=""/142, &(0x7f0000000080)=""/56, &(0x7f0000000380)=""/242, 0x5000}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vfio/vfio\x00', 0x8000, 0x0) fchmod(r3, 0x105) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1d28) [ 831.860857][ T6247] ptrace attach of "/root/syz-executor.0"[6237] was attempted by "/root/syz-executor.0"[6247] [ 831.871218][ T35] audit: type=1326 audit(1610548511.960:58): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6226 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:12 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 14:35:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x125840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x2, 0x0, [{0x3000, 0x77, &(0x7f0000000200)=""/119}, {0x106800, 0x88, &(0x7f0000000380)=""/136}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r3 = dup(r0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x4, 0x79, &(0x7f0000000440)=""/121}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r1, 0xfff, 0x7, 0x24000000000000}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002880)) r5 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000006c0)={0x2, 0x0, &(0x7f0000000540)=""/24, &(0x7f0000000580)=""/89, &(0x7f0000000600)=""/157, 0x4000}) 14:35:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf0}}, 0x20}}, 0x0) 14:35:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1d40) 14:35:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:12 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) clone(0x9200a680, &(0x7f0000000380)="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", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000200)="5953cc4c93f0d472df1124a9c3d05f741c6fcff9001934aa5328d13e1c148597874e8e06d17b4bd0c92e537da7eed1b6275b3c3d2f8d1dda73098ca2ff3a157fc7209b47f249a3552007cc79ea8b5216d6aed22bf7923f04ed77c577946240d55d32d2550c08d3e6a05545610e5f70cb10b4ee888e5f22d839c87edc0fab86163dee10b7d655d93ebabc685b55821080010a4d353014dd6afb8e19d369ebdf99d6667c3ccd2c91762aeea3b4ee3a72afccb4b940e43352c029b84bf9f860efe2ff589272b659682944cef7f8259b4fdc1be416f7cc735bd91f9b29a8e91c6535bd5953bc11903b9a53b1d5") 14:35:12 executing program 2: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x408400, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x2005}, 0x4) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1', "e439a6a7899e11f28c876dba1b72fc415467544665c1458c4722c7753d7dba4e703b7cecc3edcfdc3e21f687e34aff9e44c1d77280856c63fb7f1fabf8c96a84c2337b4b873564340c8df99b908606afc4b2f70e71c0d715cf42fd5d9bce7c1ec2648f9fedb4238396343f7cda0c717f41b0f4cf1f4511de4c26"}, 0x7e) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 14:35:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000200)=""/190, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/119, 0x102000}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000001480)=""/4096, &(0x7f0000000200)=""/191, &(0x7f0000001380)=""/235, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 832.711879][ T6313] ptrace attach of "/root/syz-executor.0"[6312] was attempted by "/root/syz-executor.0"[6313] [ 832.729089][ T35] audit: type=1326 audit(1610548512.810:59): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:12 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) 14:35:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1d58) 14:35:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x300}}, 0x20}}, 0x0) 14:35:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0xc, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 832.953787][ T6337] ptrace attach of "/root/syz-executor.0"[6334] was attempted by "/root/syz-executor.0"[6337] [ 832.978284][ T35] audit: type=1326 audit(1610548513.061:60): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6328 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:13 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r3 = socket(0x10, 0x803, 0x0) r4 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000380)=0x1) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)={0x5, 0x0, [{0x2, 0x7c, &(0x7f00000003c0)=""/124}, {0x5000, 0x1000, &(0x7f0000000440)=""/4096}, {0x4000, 0xf8, &(0x7f0000001440)=""/248}, {0x2000, 0x7b, &(0x7f0000001540)=""/123}, {0x4, 0xc6, &(0x7f00000015c0)=""/198}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="5d64ba0f513b6f8110cd200870f394563616d569dda011792125d3a641d42501ed394e4330b9829f084b6c4241c17b6daeadb1ff765169680843be817535bacc30fe9dfc3ebe5a85dbd220c395dece09d305577a0c964c54a49eb3b304a9456c20622b0598b0be553363e5e38f45c6be6b32d8dc2e5eb0c6a66c3e4edc86585a63d62fb1cdc89f9f06675747796ae3b54ea6a85bd258c427276c82db4a204eb3da3a95b9d1c5d785511bf4ad93b49b3e2e3a10738ec0ae0b6ae3d21b5d5382471e01a31260143d763dc641a0e7aac4bd9cd3c0483089cf34fbbe397da849f153", 0xe0) 14:35:13 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@hyper}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1d70) 14:35:13 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000007c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xc, @loopback, 0x3ff}, {0xa, 0x4e23, 0x1, @loopback, 0x7fffffff}, 0xffffffffffffffff, 0x14}}, 0x48) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x9, 0x0, [{0xd000, 0x8, &(0x7f0000000000)=""/8}, {0x4, 0x5f, &(0x7f0000000200)=""/95}, {0x5000, 0x72, &(0x7f0000000280)=""/114}, {0x5000, 0x0, &(0x7f0000000080)}, {0x1000, 0x40, &(0x7f0000000380)=""/64}, {0x1000, 0xc0, &(0x7f00000003c0)=""/192}, {0x100000, 0x98, &(0x7f0000000480)=""/152}, {0x2000, 0xd5, &(0x7f0000000540)=""/213}, {0xf000, 0x40, &(0x7f0000000640)=""/64}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000840)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x33}, 0x7}, {0xa, 0x4e23, 0x5, @local, 0xd4}, r2}}, 0x48) preadv(r0, &(0x7f0000000080), 0x0, 0x100, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0xe, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x600}}, 0x20}}, 0x0) 14:35:13 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:13 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x24052000, &(0x7f0000000200)="214c374d6c3c14f4e4db3446ad73003b1aed1bbe880ad8b262d4fce77b2fa09109a5935911b4e26aa6b81da345e01f2a068261fc52705fd02cb32d6da300582c67c599ff08fa20a0262c6208b068be53133cdb3cb7b2c215b9463303080fe97f937a1db3b32617dffa0c158e462f0d613d88d2a3ecf2a2ba980e0d", &(0x7f00000006c0), &(0x7f0000000380), &(0x7f00000003c0)="81264a2252e2809107ad69e4c10304f2e9700289b1f1a7e068acfc99857a0fc83a02c3fc3e073b5c3a2db84398d12a82de6f68894d9c131f1b385ffaccc24a9a28fcd9cf83818d6ab8640ddec85e7ab0d68698c9a46bab27ba6de50518a44f20e03985b5bb9bcede8c68ea6c6cedcc9b59c7f001ac8704681100"/134) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xd) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x9201400, &(0x7f0000000540)="26728e84a2867059f0fd81f8974f9c9fe6f31372a95e7d88a3124fb03baca489e3c796651a176bc1e8245e3c43d1ed12d5668a50bb01dc2b90d8b42ece95ecad60104eef49d924d19a40161bfc58a82c5c4ee23da85c0bfaf1eb0629e5b26421046db89c6a783a82f695d721447a35fb13b3d5ad3e56b8f5b0663bc61e07e8cc2a23bd17f9d9cb1c0c0d8418", &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="414e5865ae9cfe1bf5370b8805b3fc7a129f520350e413630103c8111a3b0cc1cad5e8c655d11e1e5ccc67d19e805a896d9cfd6e86598eca8c3cde") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0513b0d0f1ccf656bca9ea6d4f25076e6f08065eb40d3c4faca88cfffb4c0c4105b716d797ff0c"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="7fbb79866ecb5f4bea40728bcf41f01c9afce3ecef1f1564b3464d8717cb548c8a775d58fcc40e892aa1cbf76a9cfbffa3399c51a58fea6f67f4583d6b61dd8740b049f7f96928dfa08c4a4b82c2e5b7ed5e08f2e0bc1b348f8e574c47c79e64876171e4890acec295428544eab628ba83c485d0b5f15d2d478946b4366517ec395c04257dae50b15fd635a97811963f4ed477b52422310fb046f1021fdc", 0x9e}], 0x1, 0x9) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:13 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000200)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x202000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x1c002, 0x0) 14:35:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1d88) 14:35:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x7f0}}, 0x20}}, 0x0) 14:35:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0xf, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 833.837890][ T6418] __nla_validate_parse: 38 callbacks suppressed [ 833.837925][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)=""/10, &(0x7f0000000400)=""/169, &(0x7f0000000380)=""/103, 0x3000}) [ 833.992869][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1da0) 14:35:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 834.118635][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 834.153633][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 834.186633][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x900}}, 0x20}}, 0x0) 14:35:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x10, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0xfffffffe, &(0x7f00000000c0)=""/137, &(0x7f0000000200)=""/132, 0x0, 0x4000}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) dup(r0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)={0x7, 0x0, [{0x0, 0xe9, &(0x7f0000000380)=""/233}, {0x4, 0x8b, &(0x7f0000000480)=""/139}, {0x5000, 0xb2, &(0x7f0000000540)=""/178}, {0x6000, 0x1000, &(0x7f0000000600)=""/4096}, {0xd000, 0xcb, &(0x7f0000001600)=""/203}, {0x1, 0x76, &(0x7f0000000180)=""/118}, {0x0, 0x9b, &(0x7f0000001700)=""/155}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 834.434120][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 834.513578][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 834.534773][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 834.642538][ T6476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 834.663969][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:14 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000080)={0x1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00') r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) ptrace$setopts(0x4200, r2, 0x3, 0x22) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x2, 0x95e5}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=""/152, &(0x7f0000000180)=""/119, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1db8) 14:35:14 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 14:35:14 executing program 2: prctl$PR_SET_TSC(0x1a, 0x5) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0x5, 0x0, [{0x5000, 0x6a, &(0x7f0000000200)=""/106}, {0x100000, 0xe4, &(0x7f0000000380)=""/228}, {0xd000, 0xbb, &(0x7f0000000480)=""/187}, {0x5000, 0xc4, &(0x7f0000000540)=""/196}, {0x10000, 0x81, &(0x7f00000007c0)=""/129}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf00}}, 0x20}}, 0x0) 14:35:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x60, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:15 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 14:35:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)={0x7, 0x0, [{0x0, 0xac, &(0x7f0000000640)=""/172}, {0x5000, 0x43, &(0x7f0000000380)=""/67}, {0x5000, 0x80, &(0x7f0000000480)=""/128}, {0x4, 0x29, &(0x7f0000000200)=""/41}, {0x1000, 0x7b, &(0x7f0000000240)=""/123}, {0x6000, 0x13, &(0x7f00000002c0)=""/19}, {0x100000, 0x13, &(0x7f0000000080)=""/19}]}) 14:35:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1dd0) 14:35:15 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 14:35:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x2000}}, 0x20}}, 0x0) 14:35:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:15 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x1000, 0xce, &(0x7f0000000380)=""/206}]}) 14:35:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1de8) 14:35:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x6000}}, 0x20}}, 0x0) 14:35:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x2, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:15 executing program 2: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000200)=""/222, &(0x7f0000000380)=""/4096, &(0x7f0000002380)=""/4105, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)) 14:35:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1e00) 14:35:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x8100}}, 0x20}}, 0x0) 14:35:16 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000200)=""/119, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x4, 0x0, 0x0}]}) 14:35:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x3, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:16 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) 14:35:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf000}}, 0x20}}, 0x0) 14:35:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x4, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 836.196247][ T6651] ptrace attach of "/root/syz-executor.0"[6647] was attempted by "/root/syz-executor.0"[6651] [ 836.218609][ T35] audit: type=1326 audit(1610548516.301:61): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6646 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1e18) 14:35:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000400)='geneve1\x00', 0x10) clone(0x4000, &(0x7f0000000200)="c51242a154fe2c0d75b3a2b82e840ae918cb32fc2bedc231cb17f721b5144e5525d8b46778611564fba7d17760eacb928cb5f6c5b4b52486af763d164a794f845724cb0d4dea3f04364a79431e7273b3767c30c31bc6c76292547e3572abd49a421326d0a3757212449235a9b8281f03f6f3bd1be1535b1094a3e42e621c6b938a683377283f8d465ca2b2e88eeb9c25c125bb88b792fca60208a8b09b764f9e8c2ffbb74e5b3fe2089f7c7e7dd1fdf8b2857c99f36626274cc9282d313c8979742424d1c33f04fb43", &(0x7f0000000000), &(0x7f0000000380), &(0x7f00000003c0)="ff4c8516138805b0aed03fbe765b6adb4edfda5ebd7ce9cf4b1658ce") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x2b0, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x49b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x77}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x3, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @broadcast}, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4287e46be2418892c265adc6844a35ad1c13dc65415e35b4df85cbb8e8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0xed, 0x3, "c9e7e7d00762d0743da6650dbf3a97466dcd16048e406a6242fb272a86066e19fed01875dd9768523e1275ccd6229114e2caf9e78efb6247fa05a051abf95cfa356c5137e96ef9b3515fcebb299724c99b6eff7632d5dbcd0c1572c0bd00a8eac95faffbe6d69f2f5d0569cb0c67fbb9bcd340d62acfd7dac33a81fc4572339a6a93550af1703171612d0f0fb754c584d2d1f52a765f9024ad47af7a712dd75b721c45f415b9d8fa74ba58a592177b975b03e5afd6276eb36521333734e95d71aa3e8a2e6b590007db47a4bb85fe5db91f6bfadbd8ba18aaabc37b0ca4853ecaffcb862ebfff312667"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = mq_open(&(0x7f0000000200)=',&!-\x00', 0x2, 0x18c, &(0x7f0000000240)={0x7, 0x2fb, 0x100000000, 0x8}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000280)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0, 0x2}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet6(r2, &(0x7f0000000380)="be3746003255b5b2bf09276d453d132e41cbf53b3b25a77e637b189bd7f7303525f2709d26b3d6c6e20beb02da3b49653532b010b6d5b181ad387761a2117f22dff91ba3ab9e884440ebdad824194ca03a454e6f3fb9b47c55a89a26569540503dffd16b224669004c7181643d9f0756fecf4abf4c7b9d937ec0b52ce580b097392319eadc657c7aad0c1b74934ad93bf9e08af02063f14be7a51a25f80439b2b60d7007bc3747d1b1ee035debc7c4594aa7c8a602", 0xb5, 0x4, &(0x7f00000002c0)={0xa, 0x4e24, 0xca, @empty}, 0x1c) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x2}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x40841}, 0x11) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044085}, 0x400c801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000580)="235326695b03633fabae80f6e034c446f9860f6092c5d0955111dbafa4382f8018d4301b93f4c47252631b9173cf771ea91f2429fee63b06b205f4df6ce852cf15055c708bb7902851e2a9ffc3e7323e1825b13c7d33b25fc287049a69b90b577931") r6 = pidfd_getfd(r3, r1, 0x0) sendto$inet6(r6, &(0x7f0000000440)="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", 0xfb, 0x4000, &(0x7f0000000540)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, [], 0x1}, 0x637}, 0x1c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/144, &(0x7f0000000700)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000800)=ANY=[@ANYBLOB="deffffdeffffe29bb17a2469f2645b29758c3cd86a21e5a7ddc275b9ccb1eedfe0a9ed928d9ed782d78e0f8380147ccf7aca7ff3bd7baf9262aa36ca93bc8145c880e3aa5cb3a67dd988940e0b0bcff4ef0edf7be92bed6ea1dc482dc456e59bfc1afbf2c92d378a7247f2887c731430c4992bea1776701e99c0a8dbbf83903187fd0b74836c6ef25a8bb5b4f06793c5bcf710761d95210f0481906693a8e04370bc1a7c67ae7208ae473aebab66669aac5bcb13613c9ebf7e2893368b3cf491"]) 14:35:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1e30) 14:35:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x6, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf007}}, 0x20}}, 0x0) 14:35:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000240)={@host}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x3, r2}) 14:35:16 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) clone(0x0, &(0x7f0000000200)="e6691975d6a8a207ea7895396f603df52f4f03a17803821ecdff41f20ed053f823e8f1df45ba9366b64599f20888bf62c63abc123b5d26ec17a1f1c7d5741c57cd805e3890d698d3a0e3eb4f57c3", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x8, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:17 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x7, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1e48) 14:35:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x40000}}, 0x20}}, 0x0) 14:35:17 executing program 1: clone(0x85330080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 837.116093][ T6753] ptrace attach of "/root/syz-executor.0"[6752] was attempted by "/root/syz-executor.0"[6753] [ 837.140294][ T35] audit: type=1326 audit(1610548517.221:62): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6745 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:17 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4080000, &(0x7f0000000000)="1204c206071718cba95b68e4ae4392e6d81462d8567623be7f0ff00c7eed3fa568fad69fac21", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)="65579f02c59deea651d901ed35891069c54b39402110f8c27b197070732d82b4a189e22c32f1261e77dc431ce07bb7d7c8879608b2e30f8711c81aa3e13f2f99f36dcdbb94d8d918c09e0710b4e2b2dfd8bb7615f39d5340a1a8059ed23119319d238df46d6903f567cc58a7d3a7e5") exit_group(0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="252c48187df524a2c68b8665e8e76198577077148e7f3ae8b11b1f20eac60ee87df527d4bf809f2ce48cf48dd7e556f377d518848ac1c5f9212bacb1b922af21dfbd05dc2ac4ee17f7506ffaf829dd5592e5f64143ab0e8c324b510b8e354b1bbe0166ec340c6223a3b49ff84bb827636cd47ab983691e1018a4ab32207233f328aaa7aa0fd5cdecea982a848d8bf29dcbbb614aadd6c152efd6fe5c81281de9b51a1b7e0dde13f1aacbe0c5e38be12867bc00c6445a39d6e5a7fc9b9ec111117ea6b7c6bb1c44ab0c3b5a11dc26651e2ef5c2a30e968000f5a9f06529b684ad2b16869a36ac48d0e4de8fb00d42f79a79f9aa96711f4485", 0xf8}, {&(0x7f0000000380)="22241de96f2b935c748a95c040ff1ef8fbc63aafff26487eb56206a36d5acedb55e44fc33d8d19bcc6d6065ca74580037a563d6e3b0f1f8338a3a6e7da89ffea526146bc55d61f2139eff8f597af9a5d9d613867dbe11ca8ba302aa6798197a33d416a6f0dc490f43ada97da529b535a0b8af84ff004ee7ae87ba54cdf0bfc9a2d91f09f0d200e558803c466d772fe9b59cd47ffc799507d0df4c386bdddffe6da2bd60490be8c9423fba7fbc596f49281ee8591ffd8c32372443d0c1c8606075bad9fc7a584473d0380fe539236b0239b2287c5da12f6ce8aaacfc8d4446168c33689f4", 0xe4}], 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) signalfd4(r1, &(0x7f0000000480)={[0x2]}, 0x8, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2040) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000580)) 14:35:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1e60) 14:35:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x8, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf0ffff}}, 0x20}}, 0x0) 14:35:17 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) clone(0x4002000, &(0x7f0000000380)="51e26135ff06bb0941d20c8521a651d29d7967e42049ec179231361a51c8be7af9fe11e4d99d41d887e6d72de525f37fd2162c63aabe583ad4685fb53fdc0ba5a7213de99e4ff2096b619f2cf326e13df2c598f2e620b8f094e0cbb220e07fe46daf1764d9066cb67751a7a5bdaaae6b0c83cbe99db90696e0cfdac6a1a62687e915250190a8b6c3675b95e397f59de35346ba47d49d6d25a21927546bb18c21dc0989a0b6a82e9927e2101ab0e424ef5ed132679c4fe087dd8b15928bb4cbb3d84ac8212aa643ae51f407e3e93b17d5a77d", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000480)="c0a5acc54409d314d063ed6cda65c1ad6081838e23f8ba8ad850d4713dc31a6ba61f645e3b608f673a686b0c28b3d3ae7cdfc33a23921ac9cf32eb33843f0d6e75388e9bd30f648007f7c112c3f6d68a10fd3a44ee19d59f1af2ce2524e89ca348efa0b280884d0aa2c364fd04780d97aeb1f826dfc430e98a93e6c7a5e474ee9e") ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd_index=0x5, 0x2, 0x11, 0x0, 0x0, 0x1, {0x3}}, 0x8) 14:35:18 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1e78) 14:35:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=""/124, &(0x7f00000016c0), &(0x7f0000001700)=""/201, 0x10000}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="b5ced8cf0a342e11e70021b63aa14f003eb0577fa661afd125fe5313d4033379ff00c16d9f0e6c37e2e2430e567bee84b9a0de6078bbb26c6fe6f64f2826bf0360f43d3580bf905c1e1e62db99ed8699774aba206c1150101f98011e9575b4523a7360055e30fb1d36a9cb15f95cf04adf8856bbe3", 0x75}, {&(0x7f0000001380)="d3c6ae4808662a0938f3d9e093197acd645ad3cece2983c6e9143ae20b6232b8e23d2b705319ea57b01fe828f793ede70fb5c41d923e07d06ee17e94f29558bf6d3c2315ce1d56d485df972c53c2273be05ce1dbe8e090e03b037b8915bcc40d7135c98240d4f0ec686466df51f55c2f5651ebb8ce3dba37047282d73f606d2260bb128de2574bfc2d585dd1775c5b15b28a3c487315f12769efa86fa95ccf816cf28b19062aa63e7b272bfdcb856cac6c528f43b3e22441ce870485d376806bd23bb08b0e1d143e01c695a1", 0xcc}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x1, 0x3, 0x30000, 0x44a, 0x1, 0xff, [], 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x40) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000001480)=""/138, &(0x7f0000000280)=""/53, &(0x7f0000001540)=""/228, 0x4}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r0}, 0x0, 0x2, @inherit={0x58, &(0x7f0000001840)={0x1, 0x2, 0x3ff, 0x10000, {0x1e, 0x1, 0x0, 0x1ff, 0x1f}, [0x3, 0x2]}}, @devid}) 14:35:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x1000000}}, 0x20}}, 0x0) 14:35:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x9, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:18 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) r2 = socket$pptp(0x18, 0x1, 0x2) fsync(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000200)=""/170, &(0x7f0000000380)=""/143, &(0x7f0000000000)=""/26, 0x10000}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 838.013419][ T6838] ptrace attach of "/root/syz-executor.0"[6835] was attempted by "/root/syz-executor.0"[6838] [ 838.025601][ T35] audit: type=1326 audit(1610548518.111:63): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6838 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:18 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x2, 0x1, &(0x7f0000000080)=""/48, &(0x7f0000000240)=""/24, &(0x7f0000000280)=""/98, 0x112000}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) readv(r1, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x6000, 0x0, 0x0}]}) 14:35:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1e90) 14:35:18 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) fchdir(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x2000000}}, 0x20}}, 0x0) 14:35:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0xa, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 838.255105][ T35] audit: type=1326 audit(1610548518.341:64): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6863 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x2, r3}) 14:35:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ea8) 14:35:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0xc, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x3000000}}, 0x20}}, 0x0) 14:35:18 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x3, 0x0, [{0x0, 0x79, &(0x7f0000000200)=""/121}, {0x2000, 0x13, &(0x7f0000000000)=""/19}, {0xd000, 0x102, &(0x7f0000000480)=""/258}]}) 14:35:18 executing program 1: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r1 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x1]}, 0x8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r0, @ANYBLOB="000427bd7000fddbdf250100000008000700", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c8}, 0x800) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ec0) 14:35:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0xe, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x4000000}}, 0x20}}, 0x0) 14:35:19 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000200)=""/216, &(0x7f0000000380)=""/187, &(0x7f0000000440)=""/182, 0x1000}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000080)=""/9, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=""/16, 0x1000}) [ 839.084978][ T6957] __nla_validate_parse: 52 callbacks suppressed [ 839.084997][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)) 14:35:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ed8) [ 839.200387][ T35] audit: type=1326 audit(1610548519.291:65): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6962 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 839.222160][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:19 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) [ 839.315934][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 839.338214][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0xf, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x6000000}}, 0x20}}, 0x0) 14:35:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 839.566530][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 839.614176][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.706589][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.726786][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:20 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ef0) 14:35:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)) 14:35:20 executing program 2: ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x8, 'veth0_to_hsr\x00', {'bond0\x00'}, 0x428}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000280)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000001440)=""/121, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000200"/20, @ANYRES32=r3, @ANYRESOCT], 0x48}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000380)={{r0}, 0x0, 0xc, @inherit={0x88, &(0x7f0000001380)={0x1, 0x8, 0x100, 0xd, {0x2, 0x2, 0x459, 0x33bd, 0x6}, [0x5, 0x5, 0x20, 0x5, 0xffffffffffffffff, 0x100, 0x3, 0x8000]}}, @subvolid=0x23e}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x8000000}}, 0x20}}, 0x0) 14:35:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x10, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 840.012034][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 840.084565][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 840.103079][ T35] audit: type=1326 audit(1610548520.191:66): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7043 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x0, 0x0, [{0x4000, 0x0, 0x0}]}) 14:35:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1f08) 14:35:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x9000000}}, 0x20}}, 0x0) 14:35:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x60, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:20 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 14:35:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000600)={0x5, 0x0, [{0x4000, 0x51, &(0x7f0000000200)=""/81}, {0x4, 0xe0, &(0x7f0000000380)=""/224}, {0x1000, 0x23, &(0x7f0000000000)=""/35}, {0xd000, 0x8d, &(0x7f0000000480)=""/141}, {0x5000, 0xa7, &(0x7f0000000540)=""/167}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:20 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1f20) 14:35:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf000000}}, 0x20}}, 0x0) 14:35:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x5000, 0xeb, &(0x7f0000000200)=""/235}, {0xd000, 0x7a, &(0x7f0000000380)=""/122}, {0x3001, 0x54, &(0x7f0000000440)=""/84}]}) [ 840.995569][ T35] audit: type=1326 audit(1610548521.081:67): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7121 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1f38) 14:35:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2, r4, 0x3}}, 0x20}}, 0x0) 14:35:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x20000000}}, 0x20}}, 0x0) 14:35:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:21 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x194}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x91d}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002cbddf250200000008000100000000000c009967040020e70000000000000c000500"/46], 0x34}, 0x1, 0x0, 0x0, 0x854}, 0x8880) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14044040}, 0x20000050) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1f50) 14:35:21 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, &(0x7f00000000c0)=""/145, &(0x7f0000000200)=""/119, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000b80)=""/244, &(0x7f0000000180)=""/76, &(0x7f0000000c80)=""/119, 0x3000}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x4000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0xd000, 0xb0, &(0x7f00000003c0)=""/176}, {0x2, 0xdc, &(0x7f0000000a80)=""/220}, {0x6000, 0x7, &(0x7f0000000380)=""/7}, {0x4000, 0x2c, &(0x7f00000002c0)=""/44}]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000d40)={0x0, 0x2, [0x3, 0x3, 0x4, 0x9, 0x401]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)={0x5, 0x0, [{0x2000, 0xf0, &(0x7f0000000640)=""/240}, {0xf000, 0xcf, &(0x7f0000000740)=""/207}, {0x4000, 0x12, &(0x7f0000000d80)=""/18}, {0x5000, 0xd9, &(0x7f0000000880)=""/217}, {0x5000, 0x27, &(0x7f0000000840)=""/39}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000600)={0x2, 0x0, &(0x7f0000000540)=""/26, &(0x7f0000000580)=""/50, &(0x7f00000005c0)=""/61, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000d00)={0x2, r1}) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x1) 14:35:21 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x260440f0}}, 0x20}}, 0x0) 14:35:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3, r4, 0x3}}, 0x20}}, 0x0) 14:35:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1f68) 14:35:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1f50) [ 841.946690][ T35] audit: type=1326 audit(1610548522.031:68): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7198 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x6, 0x0, [{0x4000, 0xf1, &(0x7f0000000200)=""/241}, {0x4000, 0x93, &(0x7f0000000380)=""/147}, {0xf000, 0xb7, &(0x7f0000000440)=""/183}, {0x100000, 0x30, &(0x7f0000000000)=""/48}, {0xd000, 0xfe, &(0x7f0000000500)=""/254}, {0x10000, 0x28, &(0x7f0000000080)=""/40}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1f80) 14:35:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x464352e9}}, 0x20}}, 0x0) 14:35:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4, r4, 0x3}}, 0x20}}, 0x0) 14:35:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) creat(&(0x7f0000000000)='./file0\x00', 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1f98) 14:35:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1aa0) 14:35:22 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x60000000}}, 0x20}}, 0x0) 14:35:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6, r4, 0x3}}, 0x20}}, 0x0) 14:35:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0xfffffffffffffffe) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=""/151, &(0x7f0000000200)=""/122, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) [ 842.885072][ T35] audit: type=1326 audit(1610548522.971:69): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7276 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400000, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2711, @host}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000200)=""/246, &(0x7f0000000380)=""/71, &(0x7f0000000400)=""/220, 0x100000}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002b00)={0x0, 'ip6_vti0\x00', {0x2}, 0xbc}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002940)={0x8, 0x0, [{0x1, 0x1000, &(0x7f0000000540)=""/4096}, {0x2, 0xc5, &(0x7f0000001540)=""/197}, {0x11a000, 0x51, &(0x7f0000001640)=""/81}, {0x2000, 0x1000, &(0x7f00000016c0)=""/4096}, {0xd000, 0xfb, &(0x7f00000026c0)=""/251}, {0x1000, 0x50, &(0x7f00000027c0)=""/80}, {0x1, 0x83, &(0x7f0000002840)=""/131}, {0x2000, 0x1b, &(0x7f0000002900)=""/27}]}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000002a80)='.log\x00', 0x101900, 0x80) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000002ac0)={0xfff, 0x84, 0x3ff, 0x800}) 14:35:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1200) 14:35:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1fb0) 14:35:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7, r4, 0x3}}, 0x20}}, 0x0) 14:35:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x81000000}}, 0x20}}, 0x0) 14:35:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20040, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)) 14:35:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1fc8) 14:35:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8, r4, 0x3}}, 0x20}}, 0x0) 14:35:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:23 executing program 2: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'veth0_to_bridge\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xd000, 0x0, 0xffffffffffffffff}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x9effffff}}, 0x20}}, 0x0) 14:35:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9, r4, 0x3}}, 0x20}}, 0x0) 14:35:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1fe0) 14:35:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x11a0) [ 843.852438][ T35] audit: type=1326 audit(1610548523.941:70): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7367 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:24 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x80000}]}) 14:35:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x4, 0x0, [{0x10e000, 0x14, &(0x7f0000000000)=""/20}, {0x10000, 0x16, &(0x7f0000000080)=""/22}, {0x4, 0x7f, &(0x7f0000000200)=""/127}, {0x1000, 0xe2, &(0x7f0000001380)=""/226}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000549c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x80, "5d5f08bf5a4620"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000380)={r1, 0x100}) 14:35:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1ff8) 14:35:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa, r4, 0x3}}, 0x20}}, 0x0) 14:35:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xc3ffffff}}, 0x20}}, 0x0) [ 844.116438][ T7406] __nla_validate_parse: 38 callbacks suppressed [ 844.116459][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/107, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x2}) [ 844.200641][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 844.322613][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 844.334722][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0x9effffff}}, 0x20}}, 0x0) 14:35:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2010) 14:35:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x100000003, 0x0, 0x80019c) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x2, 0x1, &(0x7f0000000000)=""/3, &(0x7f0000000200)=""/245, &(0x7f0000000380)=""/202, 0x2000}) 14:35:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xe9524346}}, 0x20}}, 0x0) 14:35:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xc, r4, 0x3}}, 0x20}}, 0x0) 14:35:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000000)=""/25, &(0x7f0000000200)=""/143, &(0x7f0000000380)=""/217, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 844.677553][ T7438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 844.716038][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2028) [ 844.801100][ T7441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 844.830017][ T35] audit: type=1326 audit(1610548524.911:71): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7442 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8000000) 14:35:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x700, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 844.962786][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 844.984794][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf0070000}}, 0x20}}, 0x0) 14:35:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xe, r4, 0x3}}, 0x20}}, 0x0) [ 845.104021][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:35:25 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x4000) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000380)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/205, 0xcd}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2040) 14:35:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf0400426}}, 0x20}}, 0x0) 14:35:25 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0xffffffffffffffff}]}) 14:35:25 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf, r4, 0x3}}, 0x20}}, 0x0) 14:35:25 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x700ff00, 0x0}]}) 14:35:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2058) 14:35:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000000)=&(0x7f0000000240)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3}) [ 845.752420][ T35] audit: type=1326 audit(1610548525.841:72): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7531 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xf0ffffff}}, 0x20}}, 0x0) 14:35:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10, r4, 0x3}}, 0x20}}, 0x0) 14:35:26 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0, 0x100000000000000}]}) 14:35:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2070) 14:35:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=""/23, &(0x7f0000000240)=""/19, &(0x7f0000000380)=""/208, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x60, r4, 0x3}}, 0x20}}, 0x0) 14:35:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xfcffffff}}, 0x20}}, 0x0) 14:35:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:26 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0xff00000000000000, 0x7000000, 0x0}]}) 14:35:26 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_delrule={0x38, 0x21, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x80, 0x14, 0x0, 0xcf, 0x0, 0x0, 0x7, 0x10}, [@FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4055) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x5}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) finit_module(r0, &(0x7f0000000200)='0\xec\xb0,dw\x91f\x02\xf1\xf2F\xbd:\xed1\x00\xf7n\xde\x80\x95f\xb8?V9ox\xae\xb1\x9a\xea\x80\xe0\xed\x1e\xfa\xc3\xc3\xf3\x9c\x9bg\xb6\xd5\xdar/\x89\xb4N\x9a\xd8m\x144t\xc3\xcd\xa7\x1ae$\x1e\x86&\b\xba\x859\x91.\x97\x18\xd2Z\xd0\x89w\x12\x80pjkU\xf5acR\xa5\x19\xf5C\x06\xc0\xe9<\xdc\xcewu#N\xa9\xa1\xac\x8e\x97PW\xf5\xc8\x8c(/\xf3jP\x91P\x8c0@\xbd\xdbI\xfaD\xec\xa5\x96\xceT\xafJ\x85B\xe1Z3\xd4\xfb8\xea\x17s\xa07B\x93n@z\xb5C[\xe0\xd96%gS\x10\xd8\x0f\x0f>\xbdz\xb8\x8d \xdc\xfb/\xf1v\x12\xc4\x8d\xde\fg5\x82`\xd0\x1c\xdc\xc5\xa6|\xf2\x11E\xbfgP\xde\xb9\xac\x84\xa8Sl{S\x9f\xdd\x8e[\x13E\xeey\xab\x1c\xf7.\xdf\x8c\x12', 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2088) 14:35:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xfeffffff}}, 0x20}}, 0x0) 14:35:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, 0x3}}, 0x20}}, 0x0) [ 846.625162][ T35] audit: type=1326 audit(1610548526.711:73): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7641 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x1000000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) r2 = signalfd(r0, &(0x7f00000002c0)={[0x2]}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000300)={0x2, 0x3}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyprintk\x00', 0x26102, 0x0) lseek(r3, 0x5, 0x2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 14:35:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x20a0) 14:35:26 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x800000000000000, 0x7000000, 0x0}]}) 14:35:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xfffff000}}, 0x20}}, 0x0) 14:35:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x300, r4, 0x3}}, 0x20}}, 0x0) 14:35:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 846.894929][ T35] audit: type=1326 audit(1610548526.981:74): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7666 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x20b8) 14:35:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, r4, 0x3}}, 0x20}}, 0x0) 14:35:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xffffff7f}}, 0x20}}, 0x0) [ 847.133359][ T35] audit: type=1326 audit(1610548527.221:75): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7694 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:27 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x500000000000000, 0x7000000, 0x0}]}) 14:35:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/142, &(0x7f0000000180)=""/119, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) fcntl$dupfd(r0, 0x0, r1) r5 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f00000000c0)=0x81) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x1d) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 847.325999][ T35] audit: type=1326 audit(1610548527.411:76): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7716 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x20d0) 14:35:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x700, r4, 0x3}}, 0x20}}, 0x0) 14:35:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x41a, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xffffff9e}}, 0x20}}, 0x0) 14:35:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = signalfd4(r0, &(0x7f0000000000)={[0x8000]}, 0x8, 0x80800) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1d) 14:35:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 847.582248][ T35] audit: type=1326 audit(1610548527.671:77): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7743 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 847.698308][ T35] audit: type=1326 audit(1610548527.781:78): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7758 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x20e8) 14:35:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) r1 = signalfd4(r0, &(0x7f0000000000)={[0x8000]}, 0x8, 0x80800) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1d) 14:35:28 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0xfdfdffff00000000, 0x7000000, 0x0}]}) 14:35:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xffffffc3}}, 0x20}}, 0x0) 14:35:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x900, r4, 0x3}}, 0x20}}, 0x0) 14:35:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2100) 14:35:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xffffff9e}}, 0x20}}, 0x0) 14:35:28 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x0, [{0xc0000020, 0x7000000, 0x0}]}) [ 847.918136][ T35] audit: type=1326 audit(1610548528.001:79): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7779 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1d, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xfffffff0}}, 0x20}}, 0x0) 14:35:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa00, r4, 0x3}}, 0x20}}, 0x0) 14:35:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2118) 14:35:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x7f8) 14:35:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xc00, r4, 0x3}}, 0x20}}, 0x0) 14:35:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) 14:35:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xfffffffc}}, 0x20}}, 0x0) 14:35:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x18, 0x4000000, [{0x0, 0x7000000, 0x0}]}) 14:35:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2130) [ 848.841653][ T35] audit: type=1326 audit(1610548528.931:80): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7872 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 14:35:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x4e0) 14:35:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xfffffffe}}, 0x20}}, 0x0) 14:35:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xe00, r4, 0x3}}, 0x20}}, 0x0) 14:35:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x17, 0x0, [{0x0, 0x7000000, 0x0}]}) [ 849.123072][ T7907] __nla_validate_parse: 50 callbacks suppressed [ 849.123095][ T7907] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 849.200267][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 849.337101][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 849.348176][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x4b0) 14:35:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2148) 14:35:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x498) 14:35:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3, 0xffffffff}}, 0x20}}, 0x0) 14:35:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf00, r4, 0x3}}, 0x20}}, 0x0) [ 849.706728][ T7936] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x420) 14:35:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x20}}, 0x0) [ 849.755122][ T7937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 849.771819][ T35] audit: type=1326 audit(1610548529.861:81): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7939 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 849.814070][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000, r4, 0x3}}, 0x20}}, 0x0) 14:35:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x2}}, 0x0) 14:35:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2160) [ 849.859673][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:35:30 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4020940d, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:30 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 14:35:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x318) 14:35:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2178) 14:35:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5865, r4, 0x3}}, 0x20}}, 0x0) 14:35:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x3}}, 0x0) 14:35:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2b8) [ 849.971032][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 850.075829][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:35:30 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 14:35:30 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af25, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:30 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 14:35:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x4}}, 0x0) 14:35:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2190) 14:35:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6000, r4, 0x3}}, 0x20}}, 0x0) 14:35:30 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000300)={0x18, 0x0, [{0x0, 0x7000000, 0x0}]}) 14:35:31 executing program 0 (fault-call:9 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:31 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004800) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41c1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)={0x9, r3}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={r3, 0x3}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 14:35:31 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x301000, 0x20) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x1270, 0x0, 0x11, 0x148, 0x0, 0x0, 0x11d8, 0x2a8, 0x2a8, 0x11d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x10f8, 0x1140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x3, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x12d0) 14:35:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x21a8) 14:35:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x5}}, 0x0) 14:35:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6558, r4, 0x3}}, 0x20}}, 0x0) 14:35:31 executing program 0 (fault-call:9 fault-nth:1): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x21c0) 14:35:31 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvme-fabrics\x00', 0x501000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x5c60cf7caeff098a, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000380)="fc4f7b4ed55bb1019a71fe845888b52bff46bd064687f50d7f03954088e69cc5cdf1055a786f58529061faabae64196f189c5924ea936d593f9a92582e5ad3de17ff75814a2b00ebebcdbe317e206bfa2e20795c9f9a80f4c38aae2e835346a996e34a57220cc40bbff7e52e6389322c9d69caa263ad15b57af199836d37ce37d588e117553cc2078c7e42642b7d1e6618216b107b7c27551d7bdda49302d61025ee8722fad1cf855d1fc1fe0676ded26a0bc4cb43d014a37b7fb5f9aa4724218b1a7bed78ea2c1d1856d15ebdfae472d7cf48c6ab92ca2b38662ecb21401449a23aa0be", 0xe4}], 0x1, 0x9, 0x7, 0x8) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000a4) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000080)={0x1, "b6753aadb7fcf082d6318b3c19ddc43e00be3c253c78a93811c93c47a03a9ab3bcde273d9ddf6816646bf10706cf0625285559706f5e1d2dffd8b04c7d6ff988"}) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x1190c0, 0x0) 14:35:31 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000041c1, 0x40810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x134a1, 0x0, 0xfffffa2d, 0x0, 0x0, 0xd0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = getpid() write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x3e9, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x2, 0x0, 0x8, 0x1, 0x4, 0x8, 0x0, 0x9}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000885}, 0x44044) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x3, 0x2f, 0x5, 0x2, 0x0, 0x10000, 0x0, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000100), 0x1a}, 0x10080, 0x80, 0x4, 0x8, 0x2d74, 0x0, 0x85c6}, 0x0, 0xf, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000107010400000000000000000000f79818b71efc39220e23000000000000004027d5333e1c8f3d7643bd4d2abed70001be09797ec78bc3d9939f55cd1013db5235b7e5adce3ca8d77a8d664c62b5607489fc4e83100d64c2884f4cf0425f4eb472"], 0x14}}, 0x40041) prlimit64(r0, 0x8, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000400)) 14:35:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8100, r4, 0x3}}, 0x20}}, 0x0) 14:35:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x6}}, 0x0) [ 851.070933][ T8054] FAULT_INJECTION: forcing a failure. [ 851.070933][ T8054] name failslab, interval 1, probability 0, space 0, times 0 [ 851.117279][ T8054] CPU: 1 PID: 8054 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 851.126028][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.136285][ T8054] Call Trace: [ 851.139689][ T8054] dump_stack+0x107/0x163 [ 851.144233][ T8054] should_fail.cold+0x5/0xa [ 851.148936][ T8054] ? tomoyo_realpath_from_path+0xc3/0x620 [ 851.154791][ T8054] ? tomoyo_realpath_from_path+0xc3/0x620 [ 851.160749][ T8054] should_failslab+0x5/0x10 [ 851.165301][ T8054] __kmalloc+0x72/0x3e0 [ 851.169475][ T8054] tomoyo_realpath_from_path+0xc3/0x620 [ 851.175181][ T8054] ? tomoyo_profile+0x42/0x50 [ 851.179881][ T8054] tomoyo_path_number_perm+0x1d5/0x590 [ 851.185360][ T8054] ? tomoyo_path_number_perm+0x18d/0x590 [ 851.191010][ T8054] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 851.196853][ T8054] ? lock_downgrade+0x6d0/0x6d0 [ 851.202018][ T8054] ? __mutex_unlock_slowpath+0xe2/0x610 [ 851.207595][ T8054] ? __fget_files+0x288/0x3d0 [ 851.212291][ T8054] security_file_ioctl+0x50/0xb0 [ 851.217247][ T8054] __x64_sys_ioctl+0xb3/0x200 [ 851.221941][ T8054] do_syscall_64+0x2d/0x70 [ 851.226366][ T8054] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 851.232277][ T8054] RIP: 0033:0x45e219 [ 851.236178][ T8054] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 851.255961][ T8054] RSP: 002b:00007fee8b7b7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.264392][ T8054] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 851.272376][ T8054] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 851.280356][ T8054] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 851.288372][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.296347][ T8054] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c 14:35:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x21d8) 14:35:32 executing program 0 (fault-call:9 fault-nth:2): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 851.382054][ T8075] xt_cgroup: invalid path, errno=-2 [ 851.433034][ T8077] xt_cgroup: invalid path, errno=-2 [ 851.553616][ T8054] ERROR: Out of memory at tomoyo_realpath_from_path. [ 851.706431][ T8095] FAULT_INJECTION: forcing a failure. [ 851.706431][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 851.759299][ T8095] CPU: 1 PID: 8095 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 851.768137][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.778352][ T8095] Call Trace: [ 851.781656][ T8095] dump_stack+0x107/0x163 [ 851.786288][ T8095] should_fail.cold+0x5/0xa [ 851.791457][ T8095] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 851.796886][ T8095] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 851.802302][ T8095] should_failslab+0x5/0x10 [ 851.806850][ T8095] __kmalloc+0x72/0x3e0 [ 851.811051][ T8095] tomoyo_encode2.part.0+0xe9/0x3a0 [ 851.816305][ T8095] tomoyo_encode+0x28/0x50 [ 851.820878][ T8095] tomoyo_realpath_from_path+0x186/0x620 [ 851.826573][ T8095] tomoyo_path_number_perm+0x1d5/0x590 [ 851.832083][ T8095] ? tomoyo_path_number_perm+0x18d/0x590 [ 851.837844][ T8095] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 851.843682][ T8095] ? lock_downgrade+0x6d0/0x6d0 [ 851.848715][ T8095] ? __mutex_unlock_slowpath+0xe2/0x610 [ 851.854371][ T8095] ? __fget_files+0x288/0x3d0 [ 851.859059][ T8095] security_file_ioctl+0x50/0xb0 [ 851.864004][ T8095] __x64_sys_ioctl+0xb3/0x200 [ 851.869095][ T8095] do_syscall_64+0x2d/0x70 [ 851.873647][ T8095] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 851.879554][ T8095] RIP: 0033:0x45e219 [ 851.883451][ T8095] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 851.903197][ T8095] RSP: 002b:00007fee8b7b7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.911652][ T8095] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 851.919622][ T8095] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 851.927707][ T8095] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 851.935843][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.935863][ T8095] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c [ 851.967525][ T8095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 852.162424][ T8114] IPVS: ftp: loaded support on port[0] = 21 14:35:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x7}}, 0x0) 14:35:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x21f0) 14:35:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf000, r4, 0x3}}, 0x20}}, 0x0) [ 852.293945][ T8144] FAULT_INJECTION: forcing a failure. [ 852.293945][ T8144] name failslab, interval 1, probability 0, space 0, times 0 14:35:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000001000002000000000c", @ANYRES32=0x0, @ANYBLOB="00090000000000000c001a80080002800400018008001b"], 0x34}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x3}}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', r6, 0x4, 0x81, 0x5, 0x3ff, 0x0, @mcast2, @remote, 0x8000, 0x1, 0x267a, 0x8}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 852.357737][ T8144] CPU: 1 PID: 8144 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 852.366823][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.377427][ T8144] Call Trace: [ 852.380739][ T8144] dump_stack+0x107/0x163 [ 852.385120][ T8144] should_fail.cold+0x5/0xa [ 852.389665][ T8144] ? __kthread_create_on_node+0xd2/0x410 [ 852.395408][ T8144] ? __kthread_create_on_node+0xd2/0x410 [ 852.401264][ T8144] should_failslab+0x5/0x10 [ 852.405812][ T8144] kmem_cache_alloc_trace+0x55/0x360 [ 852.411142][ T8144] ? vhost_dev_reset_owner+0x160/0x160 [ 852.416640][ T8144] __kthread_create_on_node+0xd2/0x410 [ 852.422137][ T8144] ? __kthread_parkme+0x1e0/0x1e0 [ 852.427221][ T8144] ? find_held_lock+0x2d/0x110 [ 852.432226][ T8144] ? vhost_dev_reset_owner+0x160/0x160 [ 852.437869][ T8144] kthread_create_on_node+0xbb/0xf0 [ 852.443112][ T8144] ? __kthread_create_on_node+0x410/0x410 [ 852.449121][ T8144] ? rwlock_bug.part.0+0x90/0x90 14:35:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, [], 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x3}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000041}, 0x40) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) 14:35:32 executing program 0 (fault-call:9 fault-nth:3): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2208) [ 852.454335][ T8144] ? do_raw_spin_unlock+0x171/0x230 [ 852.454366][ T8154] IPVS: ftp: loaded support on port[0] = 21 [ 852.466165][ T8144] vhost_dev_set_owner+0x246/0xa10 [ 852.471679][ T8144] ? kfree+0xdb/0x3b0 [ 852.476152][ T8144] ? vhost_disable_notify+0x190/0x190 [ 852.481870][ T8144] ? __mutex_lock+0x61b/0x1110 [ 852.487277][ T8144] ? vhost_vsock_dev_ioctl+0x377/0xb80 [ 852.493282][ T8144] vhost_dev_ioctl+0xb47/0xe60 [ 852.498132][ T8144] ? vhost_enable_notify+0xa00/0xa00 [ 852.504424][ T8144] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 852.510708][ T8144] ? do_vfs_ioctl+0x27d/0x1090 [ 852.515516][ T8144] ? generic_block_fiemap+0x60/0x60 [ 852.520883][ T8144] ? lock_downgrade+0x6d0/0x6d0 [ 852.525780][ T8144] vhost_vsock_dev_ioctl+0x385/0xb80 [ 852.531110][ T8144] ? copy_overflow+0x30/0x30 [ 852.535907][ T8144] ? __fget_files+0x288/0x3d0 [ 852.540655][ T8144] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.546941][ T8144] ? copy_overflow+0x30/0x30 [ 852.551664][ T8144] __x64_sys_ioctl+0x193/0x200 [ 852.556489][ T8144] do_syscall_64+0x2d/0x70 [ 852.560941][ T8144] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.567035][ T8144] RIP: 0033:0x45e219 [ 852.570956][ T8144] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 852.590607][ T8144] RSP: 002b:00007fee8b7b7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.599064][ T8144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 852.607069][ T8144] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 852.615057][ T8144] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 852.623175][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.631301][ T8144] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c [ 852.857125][ T8208] FAULT_INJECTION: forcing a failure. [ 852.857125][ T8208] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 852.894891][ T8208] CPU: 0 PID: 8208 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 852.903739][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.914111][ T8208] Call Trace: [ 852.917427][ T8208] dump_stack+0x107/0x163 [ 852.921806][ T8208] should_fail.cold+0x5/0xa [ 852.926435][ T8208] __alloc_pages_nodemask+0x189/0x730 [ 852.931877][ T8208] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 852.938697][ T8208] ? vhost_work_flush.part.0+0xbb/0xf0 [ 852.944282][ T8208] ? vhost_work_init+0x50/0x50 [ 852.949087][ T8208] alloc_pages_current+0x18c/0x2a0 [ 852.954291][ T8208] kmalloc_order+0x32/0xd0 [ 852.958860][ T8208] kmalloc_order_trace+0x14/0x130 [ 852.963924][ T8208] vhost_dev_set_owner+0x417/0xa10 [ 852.969074][ T8208] ? vhost_disable_notify+0x190/0x190 [ 852.974482][ T8208] ? vhost_flush_work+0x20/0x20 [ 852.979365][ T8208] ? __mutex_lock+0x61b/0x1110 [ 852.984686][ T8208] ? vhost_vsock_dev_ioctl+0x377/0xb80 [ 852.990191][ T8208] vhost_dev_ioctl+0xb47/0xe60 [ 852.995096][ T8208] ? vhost_enable_notify+0xa00/0xa00 [ 853.000415][ T8208] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 853.006768][ T8208] ? do_vfs_ioctl+0x27d/0x1090 [ 853.011800][ T8208] ? generic_block_fiemap+0x60/0x60 [ 853.017034][ T8208] ? lock_downgrade+0x6d0/0x6d0 [ 853.021922][ T8208] vhost_vsock_dev_ioctl+0x385/0xb80 [ 853.027248][ T8208] ? copy_overflow+0x30/0x30 [ 853.031884][ T8208] ? __fget_files+0x288/0x3d0 [ 853.036838][ T8208] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.043127][ T8208] ? copy_overflow+0x30/0x30 [ 853.047766][ T8208] __x64_sys_ioctl+0x193/0x200 [ 853.052570][ T8208] do_syscall_64+0x2d/0x70 [ 853.057030][ T8208] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 853.064095][ T8208] RIP: 0033:0x45e219 [ 853.068021][ T8208] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 853.087782][ T8208] RSP: 002b:00007fee8b7b7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 853.096233][ T8208] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 853.104506][ T8208] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 853.112597][ T8208] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 853.120696][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 853.128785][ T8208] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c 14:35:33 executing program 0 (fault-call:9 fault-nth:4): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 853.333966][ T8206] device lo entered promiscuous mode [ 853.451130][ T8237] FAULT_INJECTION: forcing a failure. [ 853.451130][ T8237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 853.451203][ T8237] CPU: 0 PID: 8237 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 853.451230][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 853.451246][ T8237] Call Trace: [ 853.451256][ T8237] dump_stack+0x107/0x163 [ 853.451292][ T8237] should_fail.cold+0x5/0xa [ 853.451324][ T8237] __alloc_pages_nodemask+0x189/0x730 [ 853.451355][ T8237] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 853.451392][ T8237] ? vhost_work_flush.part.0+0xbb/0xf0 [ 853.451422][ T8237] ? vhost_work_init+0x50/0x50 [ 853.451462][ T8237] alloc_pages_current+0x18c/0x2a0 [ 853.451499][ T8237] kmalloc_order+0x32/0xd0 [ 853.451539][ T8237] kmalloc_order_trace+0x14/0x130 [ 853.451570][ T8237] vhost_dev_set_owner+0x417/0xa10 [ 853.451609][ T8237] ? vhost_disable_notify+0x190/0x190 [ 853.451641][ T8237] ? vhost_flush_work+0x20/0x20 [ 853.451668][ T8237] ? __mutex_lock+0x61b/0x1110 [ 853.451701][ T8237] ? vhost_vsock_dev_ioctl+0x377/0xb80 [ 853.451740][ T8237] vhost_dev_ioctl+0xb47/0xe60 [ 853.451775][ T8237] ? vhost_enable_notify+0xa00/0xa00 [ 853.451804][ T8237] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 853.451837][ T8237] ? do_vfs_ioctl+0x27d/0x1090 [ 853.451866][ T8237] ? generic_block_fiemap+0x60/0x60 [ 853.451893][ T8237] ? lock_downgrade+0x6d0/0x6d0 [ 853.451928][ T8237] vhost_vsock_dev_ioctl+0x385/0xb80 [ 853.451962][ T8237] ? copy_overflow+0x30/0x30 [ 853.451996][ T8237] ? __fget_files+0x288/0x3d0 [ 853.452029][ T8237] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.452061][ T8237] ? copy_overflow+0x30/0x30 [ 853.452094][ T8237] __x64_sys_ioctl+0x193/0x200 [ 853.452125][ T8237] do_syscall_64+0x2d/0x70 [ 853.452149][ T8237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 853.452180][ T8237] RIP: 0033:0x45e219 [ 853.452201][ T8237] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 853.452229][ T8237] RSP: 002b:00007fee8b7b7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 853.452257][ T8237] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 853.452276][ T8237] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 853.452292][ T8237] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 853.452309][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:35:33 executing program 0 (fault-call:9 fault-nth:5): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 853.452326][ T8237] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c 14:35:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2220) [ 853.861007][ T8252] FAULT_INJECTION: forcing a failure. [ 853.861007][ T8252] name failslab, interval 1, probability 0, space 0, times 0 [ 853.889050][ T8252] CPU: 1 PID: 8252 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 853.897938][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 853.908315][ T8252] Call Trace: [ 853.911639][ T8252] dump_stack+0x107/0x163 [ 853.915999][ T8252] should_fail.cold+0x5/0xa [ 853.920541][ T8252] ? vhost_dev_set_owner+0x768/0xa10 [ 853.925901][ T8252] ? vhost_dev_set_owner+0x768/0xa10 [ 853.932348][ T8252] should_failslab+0x5/0x10 [ 853.932387][ T8252] __kmalloc+0x72/0x3e0 [ 853.932421][ T8252] vhost_dev_set_owner+0x768/0xa10 [ 853.946302][ T8252] ? vhost_disable_notify+0x190/0x190 [ 853.946347][ T8252] ? vhost_flush_work+0x20/0x20 [ 853.946381][ T8252] ? __mutex_lock+0x61b/0x1110 [ 853.946412][ T8252] ? vhost_vsock_dev_ioctl+0x377/0xb80 [ 853.967010][ T8252] vhost_dev_ioctl+0xb47/0xe60 [ 853.971916][ T8252] ? vhost_enable_notify+0xa00/0xa00 [ 853.977239][ T8252] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 853.983520][ T8252] ? do_vfs_ioctl+0x27d/0x1090 [ 853.988319][ T8252] ? generic_block_fiemap+0x60/0x60 [ 853.993529][ T8252] ? lock_downgrade+0x6d0/0x6d0 [ 853.998417][ T8252] vhost_vsock_dev_ioctl+0x385/0xb80 [ 854.003727][ T8252] ? copy_overflow+0x30/0x30 [ 854.008506][ T8252] ? __fget_files+0x288/0x3d0 [ 854.013227][ T8252] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 854.019493][ T8252] ? copy_overflow+0x30/0x30 [ 854.024607][ T8252] __x64_sys_ioctl+0x193/0x200 [ 854.029425][ T8252] do_syscall_64+0x2d/0x70 [ 854.034003][ T8252] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.040275][ T8252] RIP: 0033:0x45e219 [ 854.044187][ T8252] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 854.064048][ T8252] RSP: 002b:00007fee8b7b7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.072584][ T8252] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 854.080741][ T8252] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 854.088840][ T8252] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 854.096837][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 854.104841][ T8252] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c 14:35:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2238) 14:35:34 executing program 0 (fault-call:9 fault-nth:6): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 854.475054][ T8206] device tunl0 entered promiscuous mode [ 854.625708][ T8266] FAULT_INJECTION: forcing a failure. [ 854.625708][ T8266] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 854.659150][ T8266] CPU: 0 PID: 8266 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 854.667979][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.678047][ T8266] Call Trace: [ 854.681351][ T8266] dump_stack+0x107/0x163 [ 854.685721][ T8266] should_fail.cold+0x5/0xa [ 854.690262][ T8266] __alloc_pages_nodemask+0x189/0x730 [ 854.695787][ T8266] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 854.702566][ T8266] ? find_held_lock+0x2d/0x110 [ 854.707681][ T8266] ? vhost_dev_set_owner+0x768/0xa10 [ 854.712970][ T8266] ? mark_held_locks+0x9f/0xe0 [ 854.717823][ T8266] alloc_pages_current+0x18c/0x2a0 [ 854.722971][ T8266] kmalloc_order+0x32/0xd0 [ 854.727418][ T8266] kmalloc_order_trace+0x14/0x130 [ 854.732463][ T8266] vhost_dev_set_owner+0x417/0xa10 [ 854.737789][ T8266] ? vhost_disable_notify+0x190/0x190 [ 854.743264][ T8266] ? vhost_flush_work+0x20/0x20 [ 854.748150][ T8266] ? __mutex_lock+0x61b/0x1110 [ 854.752941][ T8266] ? vhost_vsock_dev_ioctl+0x377/0xb80 [ 854.758529][ T8266] vhost_dev_ioctl+0xb47/0xe60 [ 854.763339][ T8266] ? vhost_enable_notify+0xa00/0xa00 [ 854.768653][ T8266] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 854.774916][ T8266] ? do_vfs_ioctl+0x27d/0x1090 [ 854.779686][ T8266] ? generic_block_fiemap+0x60/0x60 [ 854.784912][ T8266] ? lock_downgrade+0x6d0/0x6d0 [ 854.789797][ T8266] vhost_vsock_dev_ioctl+0x385/0xb80 [ 854.795115][ T8266] ? copy_overflow+0x30/0x30 [ 854.799739][ T8266] ? __fget_files+0x288/0x3d0 [ 854.804458][ T8266] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 854.810737][ T8266] ? copy_overflow+0x30/0x30 [ 854.815361][ T8266] __x64_sys_ioctl+0x193/0x200 [ 854.820163][ T8266] do_syscall_64+0x2d/0x70 [ 854.824602][ T8266] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.830523][ T8266] RIP: 0033:0x45e219 [ 854.834442][ T8266] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 854.854071][ T8266] RSP: 002b:00007fee8b7b7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.862509][ T8266] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 854.870499][ T8266] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 854.878489][ T8266] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 854.886470][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 854.894454][ T8266] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c [ 855.094084][ T8206] device gre0 entered promiscuous mode [ 855.326652][ T8206] device gretap0 entered promiscuous mode [ 855.633472][ T8206] device erspan0 entered promiscuous mode [ 855.920189][ T8206] device ip_vti0 entered promiscuous mode [ 856.015823][ T8206] device ip6_vti0 entered promiscuous mode [ 856.326889][ T8206] device sit0 entered promiscuous mode [ 856.809058][ T8206] device ip6tnl0 entered promiscuous mode [ 857.024233][ T8206] device ip6gre0 entered promiscuous mode [ 857.259780][ T8206] device syz_tun entered promiscuous mode [ 857.536610][ T8206] device ip6gretap0 entered promiscuous mode [ 857.743985][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.751277][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.768911][ T8206] device bridge0 entered promiscuous mode [ 858.037012][ T8206] device vcan0 entered promiscuous mode [ 858.131829][ T8206] device bond0 entered promiscuous mode [ 858.137444][ T8206] device bond_slave_0 entered promiscuous mode [ 858.145442][ T8206] device bond_slave_1 entered promiscuous mode [ 858.354499][ T8206] device team0 entered promiscuous mode [ 858.360965][ T8206] device team_slave_0 entered promiscuous mode [ 858.373672][ T8206] device team_slave_1 entered promiscuous mode [ 858.643965][ T8206] device dummy0 entered promiscuous mode [ 858.884425][ T8206] device nlmon0 entered promiscuous mode [ 858.985628][ T8206] device caif0 entered promiscuous mode [ 858.996005][ T8206] device batadv0 entered promiscuous mode [ 859.304976][ T8206] device vxcan0 entered promiscuous mode [ 859.390951][ T8206] device vxcan1 entered promiscuous mode [ 859.477785][ T8206] device veth0 entered promiscuous mode [ 859.731661][ T8206] device veth1 entered promiscuous mode [ 859.849259][ T8206] device xfrm0 entered promiscuous mode [ 859.946985][ T8206] device wg0 entered promiscuous mode [ 860.099955][ T8206] device wg1 entered promiscuous mode [ 860.323789][ T8206] device wg2 entered promiscuous mode [ 860.413995][ T8206] device veth0_to_bridge entered promiscuous mode [ 860.815373][ T8206] device veth1_to_bridge entered promiscuous mode [ 861.213803][ T8206] device veth0_to_bond entered promiscuous mode [ 861.605491][ T8206] device veth1_to_bond entered promiscuous mode [ 861.925906][ T8206] device veth0_to_team entered promiscuous mode [ 862.334042][ T8206] device veth1_to_team entered promiscuous mode [ 862.671644][ T8206] device veth0_to_batadv entered promiscuous mode [ 862.839063][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.953902][ T8206] device batadv_slave_0 entered promiscuous mode [ 863.185302][ T8206] device veth1_to_batadv entered promiscuous mode [ 863.319340][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.476384][ T8206] device batadv_slave_1 entered promiscuous mode [ 863.724711][ T8206] device veth0_to_hsr entered promiscuous mode [ 864.126846][ T8206] device veth1_to_hsr entered promiscuous mode [ 864.451388][ T8206] device hsr0 entered promiscuous mode [ 864.765756][ T8206] device veth1_virt_wifi entered promiscuous mode [ 864.993527][ T8206] device veth0_virt_wifi entered promiscuous mode [ 865.098971][ T8206] device virt_wifi0 entered promiscuous mode [ 866.049005][ T8206] device vlan0 entered promiscuous mode [ 866.054732][ T8206] device vlan1 entered promiscuous mode [ 866.169910][ T8206] device macvlan0 entered promiscuous mode [ 866.399259][ T8206] device macvlan1 entered promiscuous mode [ 866.518507][ T8206] device ipvlan0 entered promiscuous mode [ 866.524437][ T8206] device ipvlan1 entered promiscuous mode [ 867.158688][ T8206] device macvtap0 entered promiscuous mode [ 867.473279][ T8206] device macsec0 entered promiscuous mode [ 867.724504][ T8206] device geneve0 entered promiscuous mode [ 867.963625][ T8206] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.973374][ T8206] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.995380][ T8206] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.011421][ T8206] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.021661][ T8206] device geneve1 entered promiscuous mode [ 868.236078][ T8206] device netdevsim0 entered promiscuous mode [ 868.344832][ T8206] device netdevsim1 entered promiscuous mode [ 868.505910][ T8206] device netdevsim2 entered promiscuous mode [ 868.784478][ T8206] device netdevsim3 entered promiscuous mode [ 868.911171][ T8206] device wlan0 entered promiscuous mode [ 868.916905][ T8206] device wlan1 entered promiscuous mode [ 868.935531][ T8206] device veth2 entered promiscuous mode [ 868.944145][ T8206] device veth3 entered promiscuous mode [ 868.958326][ T8206] device veth4 entered promiscuous mode [ 868.963999][ T8206] device veth5 entered promiscuous mode [ 868.980192][ T8206] device veth6 entered promiscuous mode [ 868.985858][ T8206] device veth7 entered promiscuous mode [ 869.008166][ T8206] device veth8 entered promiscuous mode [ 869.015914][ T8206] device veth9 entered promiscuous mode [ 869.183224][ T8206] device vlan2 entered promiscuous mode [ 869.191104][ T8206] device veth10 entered promiscuous mode [ 869.197046][ T8206] device veth11 entered promiscuous mode [ 869.359857][ T8206] device vlan3 entered promiscuous mode [ 869.365554][ T8206] device veth12 entered promiscuous mode [ 869.372943][ T8206] device veth13 entered promiscuous mode [ 869.533107][ T8206] device vlan4 entered promiscuous mode [ 869.539932][ T8206] device veth14 entered promiscuous mode [ 869.545936][ T8206] device veth15 entered promiscuous mode [ 869.634052][ T8206] device veth16 entered promiscuous mode [ 869.640830][ T8206] device veth17 entered promiscuous mode [ 869.728672][ T8206] device veth18 entered promiscuous mode [ 869.734671][ T8206] device veth19 entered promiscuous mode [ 869.829460][ T8206] device veth20 entered promiscuous mode [ 869.835211][ T8206] device veth21 entered promiscuous mode [ 869.841948][ T8206] device veth22 entered promiscuous mode [ 869.850176][ T8206] device veth23 entered promiscuous mode [ 869.855881][ T8206] device veth24 entered promiscuous mode [ 869.863215][ T8206] device veth25 entered promiscuous mode [ 869.871731][ T8206] device veth26 entered promiscuous mode [ 869.877838][ T8206] device veth27 entered promiscuous mode [ 869.883583][ T8206] device veth28 entered promiscuous mode [ 869.892882][ T8206] device veth29 entered promiscuous mode [ 869.975908][ T8206] device veth30 entered promiscuous mode [ 869.983595][ T8206] device veth31 entered promiscuous mode [ 870.074359][ T8206] device veth32 entered promiscuous mode [ 870.081913][ T8206] device veth33 entered promiscuous mode [ 870.171381][ T8206] device veth34 entered promiscuous mode [ 870.179153][ T8206] device veth35 entered promiscuous mode [ 870.184876][ T8206] device vlan5 entered promiscuous mode [ 870.191360][ T8206] device veth36 entered promiscuous mode [ 870.198456][ T8206] device veth37 entered promiscuous mode [ 870.204290][ T8206] device vlan6 entered promiscuous mode [ 870.210818][ T8206] device veth38 entered promiscuous mode [ 870.216571][ T8206] device veth39 entered promiscuous mode [ 870.223506][ T8206] device vlan7 entered promiscuous mode [ 870.230583][ T8206] device veth40 entered promiscuous mode [ 870.236335][ T8206] device veth41 entered promiscuous mode [ 870.243268][ T8206] device veth42 entered promiscuous mode [ 870.253177][ T8206] device veth43 entered promiscuous mode [ 870.260193][ T8206] device veth44 entered promiscuous mode [ 870.265945][ T8206] device veth45 entered promiscuous mode [ 870.273396][ T8206] device veth46 entered promiscuous mode [ 870.280944][ T8206] device veth47 entered promiscuous mode [ 870.286653][ T8206] device veth48 entered promiscuous mode [ 870.293919][ T8206] device veth49 entered promiscuous mode [ 870.300979][ T8206] device veth50 entered promiscuous mode [ 870.306685][ T8206] device veth51 entered promiscuous mode [ 870.313589][ T8206] device veth52 entered promiscuous mode [ 870.320639][ T8206] device veth53 entered promiscuous mode [ 870.326366][ T8206] device veth54 entered promiscuous mode [ 870.333202][ T8206] device veth55 entered promiscuous mode [ 870.340141][ T8206] device veth56 entered promiscuous mode [ 870.345870][ T8206] device veth57 entered promiscuous mode [ 870.353446][ T8206] device veth58 entered promiscuous mode [ 870.361418][ T8206] device veth59 entered promiscuous mode [ 870.441254][ T8206] device veth60 entered promiscuous mode [ 870.449705][ T8206] device veth61 entered promiscuous mode [ 870.535927][ T8206] device veth62 entered promiscuous mode [ 870.543352][ T8206] device veth63 entered promiscuous mode [ 870.630442][ T8206] device veth64 entered promiscuous mode [ 870.636442][ T8206] device veth65 entered promiscuous mode [ 870.720263][ T8206] device veth66 entered promiscuous mode [ 870.726275][ T8206] device veth67 entered promiscuous mode [ 870.813866][ T8206] device veth68 entered promiscuous mode [ 870.821556][ T8206] device veth69 entered promiscuous mode [ 870.908753][ T8206] device veth70 entered promiscuous mode [ 870.914933][ T8206] device veth71 entered promiscuous mode [ 871.001627][ T8206] device veth72 entered promiscuous mode [ 871.008675][ T8206] device veth73 entered promiscuous mode [ 871.094448][ T8206] device veth74 entered promiscuous mode [ 871.102239][ T8206] device veth75 entered promiscuous mode [ 871.188187][ T8206] device veth76 entered promiscuous mode [ 871.194232][ T8206] device veth77 entered promiscuous mode [ 871.279791][ T8206] device veth78 entered promiscuous mode [ 871.285892][ T8206] device veth79 entered promiscuous mode [ 871.371667][ T8206] device veth80 entered promiscuous mode [ 871.378797][ T8206] device veth81 entered promiscuous mode [ 871.463190][ T8206] device veth82 entered promiscuous mode [ 871.469996][ T8206] device veth83 entered promiscuous mode [ 871.554003][ T8206] device veth84 entered promiscuous mode [ 871.560939][ T8206] device veth85 entered promiscuous mode [ 871.647549][ T8206] device veth86 entered promiscuous mode [ 871.653546][ T8206] device veth87 entered promiscuous mode [ 871.741472][ T8206] device veth88 entered promiscuous mode [ 871.750379][ T8206] device veth89 entered promiscuous mode [ 871.836439][ T8206] device veth90 entered promiscuous mode [ 871.842939][ T8206] device veth91 entered promiscuous mode [ 871.932803][ T8206] device veth92 entered promiscuous mode [ 871.939299][ T8206] device veth93 entered promiscuous mode [ 872.035112][ T8206] device veth94 entered promiscuous mode [ 872.041816][ T8206] device veth95 entered promiscuous mode [ 872.132602][ T8206] device veth96 entered promiscuous mode [ 872.139024][ T8206] device veth97 entered promiscuous mode [ 872.223492][ T8206] device veth98 entered promiscuous mode [ 872.230565][ T8206] device veth99 entered promiscuous mode [ 872.315313][ T8206] device veth100 entered promiscuous mode [ 872.321973][ T8206] device veth101 entered promiscuous mode [ 872.411679][ T8206] device veth102 entered promiscuous mode [ 872.418347][ T8206] device veth103 entered promiscuous mode [ 872.505418][ T8206] device veth104 entered promiscuous mode [ 872.512364][ T8206] device veth105 entered promiscuous mode [ 872.600298][ T8206] device veth106 entered promiscuous mode [ 872.606417][ T8206] device veth107 entered promiscuous mode [ 872.771821][ T8206] device vlan8 entered promiscuous mode [ 872.779646][ T8206] device veth108 entered promiscuous mode [ 872.785872][ T8206] device veth109 entered promiscuous mode [ 872.874287][ T8206] device veth110 entered promiscuous mode [ 872.881469][ T8206] device veth111 entered promiscuous mode [ 872.973121][ T8206] device veth112 entered promiscuous mode [ 872.981157][ T8206] device veth113 entered promiscuous mode [ 873.076019][ T8206] device veth114 entered promiscuous mode [ 873.082319][ T8206] device veth115 entered promiscuous mode [ 873.090135][ T8206] device vlan9 entered promiscuous mode [ 873.096361][ T8206] device veth116 entered promiscuous mode [ 873.104668][ T8206] device veth117 entered promiscuous mode [ 873.111652][ T8206] device vlan10 entered promiscuous mode [ 873.119583][ T8206] device veth118 entered promiscuous mode [ 873.125412][ T8206] device veth119 entered promiscuous mode [ 873.131848][ T8206] device vlan11 entered promiscuous mode [ 873.138607][ T8206] device veth120 entered promiscuous mode [ 873.144479][ T8206] device veth121 entered promiscuous mode [ 873.152114][ T8206] device vlan12 entered promiscuous mode [ 873.159082][ T8206] device veth122 entered promiscuous mode [ 873.164969][ T8206] device veth123 entered promiscuous mode [ 873.172934][ T8206] device vlan13 entered promiscuous mode [ 873.179490][ T8206] device veth124 entered promiscuous mode [ 873.185293][ T8206] device veth125 entered promiscuous mode [ 873.192300][ T8206] device vlan14 entered promiscuous mode [ 873.199610][ T8206] device veth126 entered promiscuous mode [ 873.205684][ T8206] device veth127 entered promiscuous mode [ 873.212380][ T8206] device vlan15 entered promiscuous mode [ 873.220512][ T8206] device veth128 entered promiscuous mode [ 873.226358][ T8206] device veth129 entered promiscuous mode [ 873.234177][ T8206] device vlan16 entered promiscuous mode [ 873.240486][ T8206] device veth130 entered promiscuous mode [ 873.246273][ T8206] device veth131 entered promiscuous mode [ 873.253223][ T8206] device vlan17 entered promiscuous mode [ 873.260604][ T8206] device veth132 entered promiscuous mode [ 873.266410][ T8206] device veth133 entered promiscuous mode [ 873.273424][ T8206] device vlan18 entered promiscuous mode [ 873.280363][ T8206] device veth134 entered promiscuous mode [ 873.286174][ T8206] device veth135 entered promiscuous mode [ 873.293096][ T8206] device vlan19 entered promiscuous mode [ 873.300460][ T8206] device veth136 entered promiscuous mode [ 873.306261][ T8206] device veth137 entered promiscuous mode [ 873.313277][ T8206] device vlan20 entered promiscuous mode [ 873.320903][ T8206] device veth138 entered promiscuous mode [ 873.326721][ T8206] device veth139 entered promiscuous mode [ 873.333192][ T8206] device vlan21 entered promiscuous mode [ 873.340395][ T8206] device veth140 entered promiscuous mode [ 873.346380][ T8206] device veth141 entered promiscuous mode [ 873.353262][ T8206] device vlan22 entered promiscuous mode [ 873.360357][ T8206] device veth142 entered promiscuous mode [ 873.366151][ T8206] device veth143 entered promiscuous mode [ 873.373028][ T8206] device vlan23 entered promiscuous mode [ 873.379877][ T8206] device veth144 entered promiscuous mode [ 873.385644][ T8206] device veth145 entered promiscuous mode [ 873.392269][ T8206] device vlan24 entered promiscuous mode [ 873.398838][ T8206] device veth146 entered promiscuous mode [ 873.404912][ T8206] device veth147 entered promiscuous mode [ 873.411991][ T8206] device vlan25 entered promiscuous mode [ 873.418424][ T8206] device veth148 entered promiscuous mode [ 873.424598][ T8206] device veth149 entered promiscuous mode [ 873.432252][ T8206] device vlan26 entered promiscuous mode [ 873.441423][ T8206] device veth150 entered promiscuous mode [ 873.448180][ T8206] device veth151 entered promiscuous mode [ 873.453982][ T8206] device vlan27 entered promiscuous mode [ 873.461089][ T8206] device veth152 entered promiscuous mode [ 873.468696][ T8206] device veth153 entered promiscuous mode [ 873.475529][ T8206] device vlan28 entered promiscuous mode [ 873.482298][ T8206] device veth154 entered promiscuous mode [ 873.489468][ T8206] device veth155 entered promiscuous mode [ 873.495264][ T8206] device vlan29 entered promiscuous mode [ 873.502051][ T8206] device veth156 entered promiscuous mode [ 873.510040][ T8206] device veth157 entered promiscuous mode [ 873.515860][ T8206] device vlan30 entered promiscuous mode [ 873.522692][ T8206] device veth158 entered promiscuous mode [ 873.529856][ T8206] device veth159 entered promiscuous mode [ 873.535644][ T8206] device veth160 entered promiscuous mode [ 873.544450][ T8206] device veth161 entered promiscuous mode [ 873.624940][ T8206] device vlan31 entered promiscuous mode [ 873.634518][ T8206] device veth162 entered promiscuous mode [ 873.641464][ T8206] device veth163 entered promiscuous mode [ 873.648800][ T8206] device veth164 entered promiscuous mode [ 873.654652][ T8206] device veth165 entered promiscuous mode [ 873.661326][ T8206] device vlan32 entered promiscuous mode [ 873.667133][ T8206] device veth166 entered promiscuous mode [ 873.672981][ T8206] device veth167 entered promiscuous mode [ 873.680477][ T8206] device veth168 entered promiscuous mode [ 873.686400][ T8206] device veth169 entered promiscuous mode [ 873.693951][ T8206] device vlan33 entered promiscuous mode [ 873.702554][ T8206] device veth170 entered promiscuous mode [ 873.709671][ T8206] device veth171 entered promiscuous mode [ 873.715528][ T8206] device vlan34 entered promiscuous mode [ 873.722608][ T8206] device veth172 entered promiscuous mode [ 873.730459][ T8206] device veth173 entered promiscuous mode [ 873.894917][ T8206] device vlan35 entered promiscuous mode [ 873.901128][ T8206] device veth174 entered promiscuous mode [ 873.906899][ T8206] device veth175 entered promiscuous mode 14:35:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x8}}, 0x0) 14:35:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 14:35:54 executing program 0 (fault-call:9 fault-nth:7): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x966}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8404}, 0x4000044) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1f, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 14:35:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@delchain={0x5b5c, 0x65, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0xa}, {0xc, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x1f}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x5b04, 0x2, [@TCA_CGROUP_POLICE={0x470, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x44, 0x20000000, 0x7fff, 0xffff, 0xffff8001, {0x0, 0x0, 0x6, 0x6d, 0x63, 0x7f}, {0x6, 0x1, 0x8, 0x1ff, 0xc786, 0x8}, 0x7, 0x7fffffff, 0x3ff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4edb}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x9, 0x7f, 0x3, 0x100, 0x6, 0x7011, 0x2, 0x8, 0x5, 0x6, 0x0, 0x9, 0xfffffffb, 0x0, 0x80000000, 0x38000000, 0x0, 0x1000, 0x8, 0x3, 0x5, 0x80000001, 0xdd6, 0xffffb0a5, 0x6, 0x227, 0x2000000, 0x0, 0x80000001, 0x1, 0x2, 0x8001, 0x1, 0x8, 0x40, 0x94, 0x89, 0x200, 0x9, 0x1, 0xc0c5, 0x7, 0xd7, 0x0, 0xb8, 0x1, 0x7, 0x1, 0xf69, 0x8, 0x9, 0x1, 0x4, 0x8, 0x101, 0x3ff, 0x7f, 0x2, 0xd62, 0x1ff, 0x40, 0xa6d, 0x5, 0x3, 0x5, 0x7f, 0xdb6, 0x7fff, 0x10d4, 0x1000, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x10001, 0x3, 0x0, 0x2, 0x8, 0x1, 0x8, 0xfffffffa, 0x1, 0x3, 0x3, 0x400, 0x1, 0xfffffffb, 0x1, 0x1, 0x2bb, 0x401, 0xec3e, 0x8, 0x2, 0x5, 0xffffffff, 0x5, 0x3, 0x1, 0xffffffff, 0xa0c, 0x1f, 0x80000000, 0x8, 0x6, 0x5, 0x3, 0x7f, 0x8, 0x3, 0x0, 0x9, 0xffff94f2, 0x7, 0x20, 0x7fff, 0xfffff879, 0x1f, 0x200, 0x200, 0x5, 0x1, 0x8, 0x400, 0x800, 0x1f, 0x5, 0x6759, 0xffffffff, 0xfffffff7, 0x4c, 0x8, 0x1, 0x0, 0x1, 0x2, 0x7, 0x437d, 0x3f, 0x7ff, 0x400, 0x1, 0x3, 0x8000, 0x1, 0x2df9, 0x81, 0x366b, 0x6, 0xffff, 0x1f, 0x6, 0x6, 0xdbc, 0x7fff, 0x3e9, 0x1, 0x1630, 0x4, 0xfff, 0x8001, 0xd593, 0x2, 0x800, 0xd9a1, 0x101, 0x1, 0x5, 0x800, 0x65a, 0x34, 0xffffffff, 0x5, 0x2, 0x1, 0x7, 0x436d06c4, 0x0, 0x6, 0x7f, 0x80, 0xffffffff, 0xae, 0x1f, 0x4, 0x3f, 0xffff, 0x1f, 0x8, 0x0, 0x3, 0x1000, 0x2675, 0x2, 0x1, 0x8, 0x8, 0x6, 0x16ab, 0x2, 0xf7fa, 0x80000001, 0xffffffff, 0x5, 0x2, 0xffffffff, 0x2, 0x800, 0x759f, 0x34d, 0x406, 0x0, 0x9, 0x7fffffff, 0x9, 0x7, 0x1, 0xec, 0x0, 0x3ff, 0x5, 0xdeb, 0x8, 0xeba2, 0x6, 0x81, 0x7f, 0x6, 0xffffff00, 0x3f, 0x5, 0x200, 0xfffffffb, 0x46, 0x81, 0x40, 0x10000, 0xffffffff, 0x1, 0x2, 0x4af, 0xd4f, 0x1570, 0xc9, 0x23e, 0x5, 0x2, 0x8cf2, 0xe7, 0x1ff, 0x99, 0x0, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3ff}]}, @TCA_CGROUP_POLICE={0xc7c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8c}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8000, 0x59, 0x8, 0x8, 0x6e, 0x1, 0xaf1, 0x8, 0x800, 0x2, 0x3, 0x0, 0x9, 0x4, 0x89, 0x0, 0x3, 0x7f, 0x8, 0xa90, 0x8, 0xffffffff, 0x7, 0x8, 0x7, 0x5, 0x100, 0x7, 0x9, 0x1, 0x41, 0xd2e, 0x81, 0x3, 0x5, 0xaa, 0x1, 0x6, 0x9, 0x5974911d, 0xffffffff, 0x80000000, 0x6, 0x7fff, 0x8000, 0x9, 0x7fffffff, 0x3, 0x0, 0xc9c, 0x7, 0x4, 0x8, 0x6, 0x5, 0x8, 0x40000000, 0x3, 0x7, 0x3, 0x8000, 0x10001, 0x7, 0x46, 0x40, 0xff, 0x9, 0x1, 0x3, 0x3, 0x9, 0x0, 0x8, 0x6, 0x7, 0x101, 0x2, 0x3, 0x4, 0x2, 0x3, 0xffffff61, 0x3f, 0x7fffffff, 0x2, 0x5, 0x1ff, 0x7ff, 0x6, 0xffff0001, 0xffff, 0xe8b8, 0x20, 0x5, 0x100, 0x3, 0x3, 0x2, 0x4, 0x0, 0x7fff, 0x1, 0x7f, 0x4, 0xd8, 0x7ff, 0x7, 0x5e6, 0x7a, 0x615c, 0x6, 0xcc, 0x9, 0xfff, 0x0, 0x8001, 0x7, 0x4, 0x3, 0xdc0d, 0x17c, 0xab4, 0x9a6c, 0x1, 0x7, 0x80000001, 0xdbc2, 0x1000, 0xff, 0x3ff, 0x4, 0x1000, 0x6, 0x1e2, 0x8, 0x0, 0x1, 0x7f, 0x2, 0x8, 0x1, 0x800, 0xfff, 0x80000001, 0x5, 0x3, 0x4, 0x1, 0x0, 0xfffffff7, 0x1000, 0x800, 0x3, 0x7ff, 0x9, 0x7fffffff, 0x0, 0xfff, 0x6c, 0x4ba, 0x2, 0xd0000000, 0x80000001, 0x8, 0x2897, 0x2, 0x80000000, 0x1, 0x1, 0x7fffffff, 0x71b5, 0x9e, 0x80000000, 0x7, 0x3f, 0x585abcd0, 0x8, 0xa8, 0x81, 0x20, 0x9a, 0x8, 0x1f, 0x0, 0x3, 0x0, 0x15d1, 0x1, 0x5, 0x1, 0x0, 0x8001, 0x3f, 0xf98, 0x800, 0x1, 0x7, 0x7, 0xd20a, 0x1, 0x7f, 0x3, 0xff, 0x8, 0x1000, 0x0, 0x2, 0x7ff, 0x1, 0x1f, 0x4, 0xc847, 0x80000000, 0xfffffffe, 0x3, 0x80000000, 0x0, 0x9, 0x5, 0xffffffff, 0x2, 0x0, 0x2, 0x2, 0x5, 0x8, 0x80, 0x800, 0x4, 0x7, 0x1ff, 0x1, 0x3, 0x3, 0x4, 0xfff, 0xfffffff9, 0x3, 0x8001, 0xd31, 0x4, 0x400, 0x4, 0x80000000, 0x7fffffff, 0x2, 0x7, 0x9, 0xb1, 0x7, 0x8, 0x1000, 0xfff, 0x80000000, 0x7ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffff, 0x5, 0x20, 0x1, 0x11, 0x6, 0x6, 0x9, 0x4, 0xc0e, 0xcf, 0xc1d, 0x6, 0x0, 0x1, 0x2, 0xe1, 0xffffffff, 0x4, 0x8, 0x7fffffff, 0x4, 0xff, 0x8a7e, 0x100, 0x5c8, 0x9, 0x6, 0x5, 0x5, 0x9, 0x6, 0x9, 0x2, 0x1, 0x7, 0x800, 0xb2, 0x7, 0x7, 0x7f, 0x6487, 0x80000000, 0x0, 0x100, 0x0, 0x7, 0x8ca00000, 0x1, 0x1, 0x3, 0xc6a7, 0x3, 0x1000, 0x2, 0xaea, 0x81, 0xffffffc2, 0x9, 0x7fffffff, 0x5, 0x3, 0x5, 0x4, 0x8, 0x9, 0xc28b, 0x1, 0x6, 0x0, 0x1ff, 0x0, 0xff, 0x9, 0x6, 0xff, 0x3f, 0x8, 0x7fff, 0x1, 0x1, 0x5, 0x7f, 0x1ae, 0x8, 0x9, 0xa0, 0x8, 0x0, 0x6, 0x9, 0xffff, 0x80000001, 0x200, 0x400, 0xfffff000, 0x7dc5, 0x1, 0x5, 0x6, 0xa6e, 0x1, 0x5, 0x88, 0x2, 0x6, 0x5, 0x4, 0x6, 0x6, 0x6, 0x3, 0x3, 0x8, 0x2, 0x8, 0x40, 0x8, 0x5, 0x20, 0x101, 0xfffffff9, 0x9, 0xc000000, 0x3ff, 0x0, 0x2, 0xffffffff, 0x6, 0x3f, 0x5e7, 0x84a0, 0x7, 0x2, 0x5, 0x1, 0x9, 0x7, 0x1285, 0x5, 0x3f, 0x8, 0x3, 0x8, 0x8, 0x2, 0x9, 0x7f, 0x80000001, 0x0, 0xbee7, 0x100, 0x1, 0x5, 0x7, 0x1, 0xed, 0x0, 0x7, 0x4, 0x5, 0xfc, 0xe000000, 0x3559fcd, 0x3, 0x80, 0x9, 0x2, 0x9f9, 0x5c, 0x4, 0x7ff, 0x3, 0x6, 0x401, 0x7efc, 0x9, 0x5, 0x4, 0x0, 0x4, 0xb49, 0x7, 0x1000, 0x7, 0x800, 0xffff, 0x8a2, 0x5, 0x1, 0x8, 0x0, 0x4, 0x6, 0x400, 0x4, 0x8, 0x1, 0x3, 0x2, 0x40ff, 0x400, 0xd2, 0xffff, 0x6, 0x94, 0x1ff, 0x20, 0x56cdcae3, 0x101, 0x1, 0x3f39, 0x1, 0x7fff, 0x0, 0x4, 0x5, 0x800, 0x0, 0x7fff, 0x8, 0x1000, 0xff, 0x3, 0x8, 0x7, 0x401, 0x538, 0x3, 0x5, 0x7, 0x1ff, 0x1, 0x3f, 0x9, 0x1, 0x101, 0x7, 0x80000001, 0x6, 0xfffffffd, 0x2, 0x21c00000, 0x5, 0x2, 0xdd2, 0x6, 0x7, 0x6, 0x1, 0x4, 0x4, 0x0, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x100, 0x4, 0x5, {0x81, 0x1, 0x6, 0x0, 0xb6d, 0x8001}, {0x4, 0x3, 0x6, 0x5, 0xd1c6, 0xa1}, 0x10001, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x6, 0x2d5, 0x7f, 0x0, 0x5, 0x1ff, 0x53f, 0x2, 0x4f, 0x8a0, 0x7fff, 0x2, 0x4, 0x3f, 0x2, 0x0, 0x6, 0x3ae2f69f, 0x8, 0x2, 0x101, 0x6, 0x6, 0x1, 0x7, 0x3, 0x3ff, 0x1, 0x1000, 0x80000000, 0xee9a, 0x1f, 0x1, 0x7, 0x2, 0xfffff100, 0x7f, 0xffffffff, 0x5, 0x6, 0xbf5, 0x8, 0x1, 0x7ff, 0x0, 0x2, 0x8, 0x854a, 0xfa6d, 0x3f, 0x94c, 0x3, 0x3, 0x3, 0x7, 0x2, 0x6, 0x404, 0x6, 0x6945, 0x2, 0x0, 0x4, 0x5, 0x2, 0x8, 0x9, 0x911, 0x2, 0x9, 0xffff, 0x789, 0x79, 0xfffffe01, 0x10000, 0x7, 0x6, 0x4, 0x8001, 0x5, 0xa6, 0xf998, 0xfff, 0x8000, 0xfffffffe, 0x200, 0xeff9, 0x9, 0x100, 0x101, 0x4, 0x969, 0x401, 0x1000, 0x7fff, 0x53d, 0x101, 0x8, 0x8000, 0x200, 0xa3ac, 0x7952, 0x2fdc, 0x8060, 0x2, 0x79, 0x2da, 0x9fc, 0x0, 0x7fff, 0xffff, 0xb3, 0x101, 0x7, 0x7, 0x4, 0xfb, 0x2, 0x0, 0x80, 0x0, 0x1, 0x0, 0x10000, 0x1, 0x4000, 0x7f, 0xff, 0x0, 0x5, 0x3, 0x7ac, 0x9, 0x8, 0x8, 0x7fff, 0x8, 0x0, 0x3, 0x8000, 0x9, 0x6, 0x3, 0x200, 0x6, 0x2, 0x101, 0x6, 0x9, 0x9, 0xfffffffe, 0x3, 0x4, 0x8, 0x80, 0x26, 0xff, 0x1, 0x173, 0x1, 0x1, 0x8, 0x5, 0xffff, 0xcb24, 0x0, 0x7fff, 0x401, 0x3f, 0x7f, 0x3, 0x8, 0x4, 0x1b, 0xfff, 0x25, 0x3, 0x9, 0x81, 0x805, 0x7, 0x9, 0xfffeffff, 0x1000, 0xe815, 0xfffffc01, 0x3, 0x1f, 0x401, 0x9, 0x2, 0x7fffffff, 0x10001, 0x9, 0x4, 0x6, 0x5, 0x80, 0x1, 0x9, 0x100, 0x4, 0x5, 0x100, 0x0, 0xfffffffb, 0xdb42, 0xfff, 0x6b5d, 0x8, 0x100, 0x657, 0x2, 0x5, 0x1f, 0x2, 0x3, 0x6, 0xfffff140, 0x3, 0x5, 0x8, 0x6, 0x8, 0x9, 0xab600000, 0x1, 0x7, 0x81, 0x268, 0x80000001, 0xa7, 0x2, 0x3f, 0x2, 0x8000, 0x9, 0x4, 0x10000, 0x7dae, 0x2, 0x101, 0x2, 0x3, 0x6, 0x4, 0x15, 0x1, 0x2, 0x2, 0x3, 0x8, 0x36a, 0x8, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_CGROUP_POLICE={0x418, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x40, 0xffffff01, 0x5, 0x5, 0x9, 0x1f, 0x7, 0x8c, 0x1, 0x8, 0x8, 0x38e5, 0x6, 0x88f8, 0x4f5, 0x800, 0x7, 0x2, 0x8000, 0x7d65b7df, 0x6, 0x5, 0x2, 0xf98, 0x0, 0x8, 0x5, 0x401, 0x6, 0x1, 0x0, 0x4, 0x5, 0x1, 0x6, 0x4, 0x7, 0x7fff, 0xfffffffa, 0x2, 0x876, 0x7, 0xfffffffd, 0x10001, 0x2, 0x7fffffff, 0x60c2, 0x2, 0x6, 0x8, 0x7, 0x0, 0x20, 0x1f, 0x81, 0x7f, 0x8, 0x5, 0x4, 0x2400000, 0x6, 0x1, 0x8, 0x6, 0x1, 0x2, 0x3, 0x100, 0x3, 0x7f, 0x4, 0xff, 0xbb, 0x10000, 0x5, 0x3, 0x8b, 0x3, 0x6, 0x80, 0x9, 0x1, 0x1ff, 0x800, 0x5, 0x77, 0xff, 0x8, 0xb9c, 0x7, 0x589, 0x7fff, 0x2, 0x8001, 0x9, 0x101, 0x7ff, 0xf2a9, 0x6, 0x4dbe, 0x66, 0x7c4a, 0x5f57ef81, 0xfffffffa, 0x6, 0x9, 0x8, 0x1, 0x7, 0x48c, 0x3ff, 0xfff, 0x75, 0xffffffff, 0x7d, 0x9, 0xbe, 0xd5, 0x7fff, 0x4, 0x6, 0x9, 0x7357, 0xca1, 0x5, 0xfffff8e8, 0xfff, 0x5, 0x8, 0x89ed, 0x3, 0x3, 0x1, 0x8, 0x1, 0x8, 0x1f, 0x9, 0x200, 0x679, 0x1, 0x0, 0x7, 0xffffffff, 0x0, 0x1ff, 0x9, 0x9187, 0x42, 0xf8f2, 0x7315, 0x101, 0x4, 0x1, 0x0, 0xc9, 0x4, 0xfffffff7, 0x9, 0x3, 0x9, 0x0, 0x4, 0x401, 0x7, 0x3, 0x1, 0x5, 0x60c, 0x100, 0x6, 0x2, 0x3, 0x8, 0x6, 0x7, 0x6, 0x2, 0x1, 0xf1, 0xfffffffc, 0x1000, 0x8, 0xffffffff, 0x6, 0x400, 0x1, 0x27414355, 0x2, 0x400, 0xfffeffff, 0x3, 0x81, 0x7, 0x1, 0x1, 0x7, 0x6, 0x80000000, 0x75, 0x3, 0x4e7, 0x4, 0x100, 0x2, 0x10000, 0x0, 0x3f, 0x3, 0x95f, 0xffffffe0, 0x80000001, 0x80000000, 0x0, 0x8001, 0x7a, 0x3f, 0x3, 0x3, 0x2db2, 0x7, 0x10000, 0x8001, 0x2, 0x9, 0x42, 0x29, 0x1, 0x100, 0xfd47, 0x4, 0x9, 0x69d, 0x3f, 0x0, 0x0, 0xffffff63, 0x9, 0xffffffff, 0x2, 0x1, 0x7, 0x1a96116a, 0x0, 0x9b, 0xffff, 0x0, 0x4, 0x1e, 0x800, 0x7, 0x3ff, 0x9, 0xfff, 0xfff]}]}, @TCA_CGROUP_POLICE={0x1438, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xe163}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12, 0x3, 0x5, 0x61a, 0x0, 0xb1d, 0x1, 0x7, 0x80000001, 0x2, 0x7, 0x9, 0x7, 0x3b, 0x0, 0xfffffc01, 0x7, 0x8dc, 0x6f77, 0x4, 0x5, 0x7, 0x0, 0x9, 0x40, 0x7fff, 0x0, 0x2, 0x9d5, 0x2, 0x4, 0x3f, 0x30000000, 0x5, 0x3ff, 0x1686, 0x3, 0x80000000, 0x4, 0x2, 0x9, 0x2, 0x1, 0xffffffe0, 0x6, 0x4, 0x0, 0x80000000, 0x7fff, 0x2, 0xffffffc0, 0x200, 0x7ff, 0x7, 0xfff, 0x6, 0x2, 0x9, 0x8, 0x3, 0x9, 0x8, 0x5, 0x5, 0xfffff800, 0x76, 0x7fffffff, 0x35, 0x7, 0x6c0, 0x1, 0x3, 0x100, 0x8001, 0x4, 0x3, 0x7, 0x60, 0x4, 0xffffff81, 0x4, 0x6, 0x8, 0x0, 0x0, 0x43c2, 0x5, 0x0, 0x59, 0x9, 0x1ff, 0x6, 0x6, 0x6, 0x7, 0xcb, 0x6ce, 0x9, 0x4, 0x79, 0x4, 0x7, 0xd6, 0x9, 0x3, 0x100, 0x1, 0x3, 0x7ff, 0x82, 0x4a, 0x4, 0x7b3, 0xa0df, 0xd, 0x8, 0x6, 0x7ff, 0x7, 0x101, 0x9, 0xffffffff, 0x1, 0x1, 0x7fff, 0x6, 0x4, 0x68, 0x20, 0x4, 0xbc15, 0x3, 0x7fffffff, 0xf40, 0x6, 0xe78, 0x200, 0x6, 0x100, 0x200, 0x4, 0x240000, 0x1, 0x7fffffff, 0x81, 0x8, 0x6, 0xe1, 0x9, 0x2, 0x3, 0xbe, 0x9, 0x5, 0x3, 0x3f, 0x1297, 0x8, 0xbd, 0x9, 0x5, 0x6, 0x4, 0xa, 0x2, 0x9e, 0x4, 0x8, 0x100, 0x0, 0x200, 0x9, 0x800, 0x9, 0x8, 0x2, 0x10001, 0x1, 0x7b, 0x40, 0x1, 0x3, 0x0, 0x40000, 0x4, 0x1, 0x1, 0xffff4708, 0x4, 0x1b234671, 0x4, 0x384, 0x7, 0x8, 0x3f8000, 0x4, 0x100, 0x1, 0x1, 0x1, 0x0, 0x36, 0x5, 0x1, 0x9, 0x7, 0x3, 0xf1, 0x8, 0x3, 0x40, 0x1, 0xff, 0x9, 0x4, 0xa8, 0x10001, 0xea3, 0x3add, 0x0, 0x6, 0xfffffffb, 0x3, 0x7, 0x1, 0x8, 0x8, 0x654, 0x9, 0x0, 0x23, 0x2, 0x0, 0x2c06, 0x1, 0x0, 0xfffffffa, 0x0, 0xd4, 0xfff, 0x3f, 0xfffffffe, 0x4, 0x4, 0x0, 0x0, 0x7, 0x6, 0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf030, 0xfffff3ed, 0xfffff0c8, 0xfff, 0xb91, 0x3, 0x1, 0x1, 0x8, 0xf4f, 0x1, 0x9dd, 0x0, 0x3, 0x1ff, 0x114c, 0x430, 0x9, 0x5c, 0x0, 0x5, 0x1, 0xffffffff, 0x4, 0xfffffffa, 0x3, 0x1, 0xe45, 0x4, 0x2, 0xffff, 0x1, 0x8, 0x5, 0x8, 0x0, 0xfe7, 0x6, 0x3, 0x0, 0xffffffff, 0x2d6, 0x1, 0xff, 0x8, 0x5, 0x748d, 0x8, 0x80, 0x7, 0x6, 0x2, 0xe78e, 0x8000, 0x2, 0x0, 0x3, 0x8001, 0x734, 0x80, 0x10001, 0x6, 0x2, 0x40, 0xf36, 0x4, 0x75cc92ba, 0x6, 0x8, 0x6, 0x8, 0x1, 0x5, 0x8, 0xfffffffd, 0x0, 0x4, 0x2, 0x400, 0x1f, 0x133, 0xa4, 0x8, 0x59a, 0xf, 0x2, 0x676, 0x275fcb7, 0x9, 0x8a1, 0x0, 0x8, 0x80000000, 0x0, 0xf3db, 0x10001, 0xff, 0x563b, 0x3ff, 0x4, 0x7b91, 0x3ff, 0xcc, 0x5, 0xfffffffa, 0x5, 0x3, 0xafe, 0x2, 0x9, 0x6, 0x4, 0x5, 0x1, 0x4, 0xffffffff, 0xffffffc1, 0x71b, 0x0, 0x7, 0x3f, 0x5, 0x1ff, 0x7, 0x4, 0x6, 0x8, 0x6, 0x1000, 0x55d, 0x9, 0x0, 0xa6f, 0x401, 0x7ff, 0x8, 0x80, 0x9, 0x2040, 0x10000, 0xfff, 0x8, 0x9, 0xfff, 0xb5, 0x9c, 0x5, 0xfffffffd, 0x2, 0x4, 0xfff, 0x7fff, 0x0, 0xfffffff8, 0x7fffffff, 0x8, 0x1, 0x5, 0x8001, 0x9, 0x401, 0x0, 0x3ff, 0x0, 0x8, 0x401, 0x3ff, 0x0, 0x65, 0x4, 0x9, 0x5, 0x0, 0x4, 0x7, 0x7, 0x101, 0x81, 0x1, 0xdf, 0x8000, 0x10001, 0x1, 0x10000, 0x40, 0xd548, 0xffff, 0x4ec00000, 0x839f, 0x3, 0x4, 0x13, 0x376, 0x3, 0xb19e, 0x7fff, 0x8000, 0x3, 0xfffffffb, 0x1f, 0x8, 0xffff, 0x1, 0x7, 0x0, 0x200, 0x7, 0x4a8637cd, 0x7, 0x80000000, 0x8, 0x8fa, 0x8, 0x3ff, 0x7, 0x0, 0x2, 0xff, 0x1, 0x40, 0x2, 0x8000, 0x9, 0x5, 0x4, 0x7ff, 0x6, 0x7, 0x7f, 0x6, 0x1a, 0x7, 0x7, 0x4, 0x7, 0x3, 0xffffff8d, 0x5, 0x9, 0x0, 0xffff, 0x3, 0x3, 0x0, 0x5, 0xb2ad, 0x5, 0x5, 0x3def8b8c, 0x0, 0x4, 0x1000, 0x7, 0x10001, 0x1, 0x1000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xffffffff, 0x8d, 0x7fff, 0x8, 0x4, 0x1, 0x8, 0x0, 0x0, 0x80000001, 0x80, 0x7f, 0x800, 0x6, 0x4, 0x1, 0x21, 0x7ff, 0x9, 0x5, 0x2, 0x4, 0x80000000, 0x0, 0x4f8, 0x401, 0x8, 0xcae0e000, 0x20, 0xc6, 0x0, 0x1f, 0x1, 0x78843238, 0x40, 0x9, 0x0, 0xfffff1d4, 0xffffffff, 0x3, 0x7fff, 0xf5, 0xf8, 0x8, 0x80000000, 0xffff, 0x6, 0x80000000, 0x6, 0x5, 0xde72, 0x3f, 0xffff, 0x1, 0x401, 0x3, 0x2, 0x9, 0x4, 0x98, 0xfff, 0x100, 0x5, 0x80000001, 0x5, 0x80, 0x20005, 0x20, 0x40, 0x1ff, 0xb66d, 0x6, 0x1f, 0xff, 0x3f, 0x200, 0x0, 0x0, 0x6, 0x40, 0x3, 0x6, 0x2, 0xfffffff7, 0x2, 0x0, 0x6, 0x9, 0x0, 0x80, 0x5, 0x3, 0x80, 0x8001, 0x1000, 0x1, 0xffffffff, 0x9, 0x0, 0x2d5fffd3, 0x7a77, 0x8b, 0x3f, 0x7, 0x6, 0x7fff, 0x6, 0x1, 0x2, 0x2, 0x2, 0x7f, 0x1, 0xe939, 0x7, 0x2e, 0x10000, 0x80000001, 0x7ff, 0xc939, 0xffffffff, 0x5, 0x1, 0xf3, 0x1000, 0x9926, 0x3, 0x3fdb, 0x80, 0x4, 0x10001, 0x5d5, 0x3ac4, 0x7, 0x1ff, 0x1000, 0x20, 0x5, 0xeb, 0x0, 0x8, 0x7, 0x7, 0xc90, 0x100, 0x3e000000, 0xe152, 0x0, 0x0, 0x6, 0x2, 0x4, 0x3, 0xd6, 0x2, 0xfffffff8, 0x400, 0x4, 0x5, 0x0, 0x0, 0x9, 0x5, 0x5d, 0x81, 0x2, 0x3827, 0x9, 0x2, 0xda, 0x6c2, 0x200, 0x5, 0x9, 0xfff, 0x8, 0x1ff, 0x800, 0x0, 0x74c9, 0x40000, 0xa8b, 0x2800000, 0x5, 0x101, 0x9, 0x2, 0x3e1, 0x3ff, 0xfffff975, 0x5, 0x6, 0xbce9, 0x1, 0xb5ca, 0x401, 0x7fff, 0x800, 0x4, 0x4, 0x2, 0x3, 0x80000001, 0x3800000, 0x6, 0x1, 0x0, 0xf93c, 0xffffffff, 0xa2, 0x9, 0x1, 0x3, 0x1, 0xf498, 0x54d, 0x6, 0x2, 0x3, 0x6, 0x9, 0x100, 0x9, 0x3, 0x1, 0x3ff, 0x1, 0x38, 0x9, 0x8001, 0xfffffffc, 0x449f, 0x2, 0xa4, 0x0, 0xffff, 0x0, 0x7ff, 0x1f, 0x6, 0x7, 0x4, 0x8001, 0x80000000, 0x7fffffff, 0x5, 0xcb, 0x3d28, 0x300, 0x1, 0xa2c, 0x8, 0x9, 0x800, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0xc1, 0x0, 0x4, 0x2, 0x6, 0x80000001, 0xa91, 0xc7, 0x80000000, 0x7, 0xfff, 0x0, 0x14000, 0x9, 0x4, 0x4, 0x4, 0x6, 0x80000000, 0x220, 0x4, 0x7, 0x7, 0x7, 0x20, 0xc73b0cd, 0x0, 0x9, 0x80, 0xff, 0xfffffc00, 0xe3, 0x40, 0x5, 0x1f, 0x3ff, 0xfffeffff, 0x0, 0x6, 0x0, 0x6e81dc8b, 0x8, 0x2, 0x7, 0x200, 0x1, 0x1, 0x0, 0x0, 0xfffffffb, 0x4, 0x9, 0x8f9f, 0x20, 0x2, 0x800, 0xfffffff8, 0x6d9, 0x9, 0x6, 0x8, 0x76de, 0x184b, 0x80, 0x2ff0353b, 0xcce, 0x0, 0xff, 0xffffffff, 0x8, 0x81, 0x8000, 0x3, 0x6, 0x4, 0x400, 0x7, 0x1ff, 0x3f, 0x9, 0xfffffffe, 0x5, 0x7, 0x8000, 0x47c5e650, 0x6, 0x1, 0x0, 0xfc, 0x7f, 0x100, 0x1, 0xff, 0x7, 0x4, 0x81, 0x100, 0x7, 0x0, 0x430a, 0x3, 0x4, 0x10000, 0x1, 0x8, 0x2d, 0xffffffff, 0x1ff, 0x2, 0x5, 0xffffff7a, 0x4c87, 0x2, 0x7fffffff, 0x8, 0x6, 0x81, 0x7ff, 0xffff, 0x1, 0x7fffffff, 0x4, 0x0, 0x1, 0x17ce, 0x4, 0xed, 0x7fffffff, 0x1, 0xfd9, 0x1, 0x65e, 0x7ff, 0x5, 0x4, 0xce7, 0x3ff, 0x1e2, 0x1, 0x9085, 0x9, 0x3, 0x1, 0x7ff, 0x81, 0x15, 0x2, 0x1f, 0x4, 0x7, 0x2f, 0x0, 0x10000, 0xc0000000, 0x1, 0x10001, 0x6, 0x9, 0x6, 0x2, 0xd4e, 0x80000000, 0x4ac13adb, 0x5, 0x6, 0x7780, 0x14361367, 0x20, 0x8, 0xe66, 0x2, 0x7, 0x27eb, 0x0, 0xfffffaf2, 0x7, 0xf9, 0x400, 0x5, 0x4, 0xfffffff8, 0x9, 0x7, 0xff, 0x4, 0x2, 0x5, 0xde3, 0x80, 0x1f, 0xfffffffc, 0x9, 0xffffffff, 0x8001, 0xbc6, 0x5, 0x8, 0x80, 0x8, 0xfff, 0x4c9ebc99, 0x2, 0x101, 0x1, 0x4, 0x7, 0x5, 0x1, 0x5, 0xffffff80, 0x7, 0x5, 0x7583, 0x10000, 0x0, 0x2, 0x4c6, 0x4, 0x1e, 0x6, 0x0, 0x0, 0x4, 0x1f, 0x8, 0x8, 0x0, 0xf75, 0xffffff01, 0x7c, 0x2, 0x2, 0x8, 0x400, 0xfe, 0x7ff, 0x44b, 0x400, 0x6, 0x1, 0x8, 0x7, 0xcfd9, 0x10001, 0x7f, 0x5, 0x0, 0x1f, 0x91, 0x101, 0x3f, 0x3ff, 0x400, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3, 0x8, 0xa2, 0x3ff, 0xef, 0x0, 0x6, 0x1, 0x5, 0x788, 0x8241, 0xbd2a5a61, 0x0, 0xffffffff, 0xb95a, 0x8, 0x4, 0x8, 0x5, 0x8, 0xfffffffe, 0x40, 0x3ff, 0x0, 0x143a, 0x3, 0x64, 0xfffffff8, 0x4, 0x2, 0x2, 0x5, 0x7f, 0x4, 0x3ff, 0x4, 0x8, 0x0, 0xd2, 0xffffff00, 0x9, 0xffffff89, 0x39, 0x1, 0x6, 0x4, 0xffffffff, 0x4, 0x7ff, 0x0, 0x5, 0x0, 0x0, 0x3, 0xfff, 0xffffffff, 0x9436a1c, 0x7, 0x3, 0x1, 0x8, 0x80000001, 0xc08, 0x5, 0xfff, 0x9, 0x7ff, 0x1, 0x3, 0x9, 0x7, 0x1, 0x4, 0x8, 0x65cd, 0x4, 0x1f, 0x414d, 0x4, 0x3, 0x0, 0x1ff, 0x7fffffff, 0x17f, 0x4, 0x6, 0x2, 0x20, 0x5, 0xfff, 0x400, 0x4, 0x400, 0x7, 0xa1, 0x3, 0x6, 0x4, 0x1, 0x80000001, 0x80000000, 0x3, 0x8, 0x401, 0x7fffffff, 0x7, 0x200, 0x7fff, 0x1ff, 0x9, 0x7, 0x1ff, 0x7, 0x7, 0x7, 0x4, 0x2, 0x6, 0x80000001, 0x42ed, 0x2, 0x1f3a, 0xff, 0x5, 0x10001, 0x101, 0x3, 0x4, 0x81, 0x0, 0x1, 0x3, 0x7, 0x6, 0x30, 0x4, 0x1, 0x1, 0x81, 0x401, 0x3, 0x80000000, 0xffff, 0x6, 0x5, 0xffffff98, 0x10000, 0x46ecf32, 0x6, 0xfffffffa, 0x5, 0x59dea995, 0x8000, 0x1, 0x2, 0x800, 0x9, 0x4, 0x7, 0x1, 0x3, 0x10001, 0x7, 0x9, 0x9a53, 0x2, 0x2, 0x8, 0x2af2, 0x4, 0x2, 0x49, 0x800, 0x1, 0x2, 0x8, 0xfffffc8a, 0x5, 0x9, 0x0, 0x1f00, 0x9, 0x98, 0x4, 0x100, 0x100, 0x6, 0x7, 0x6, 0x2, 0x5, 0x5, 0x7, 0x9, 0x7fff, 0x4, 0x4, 0x4, 0x8001, 0xf4, 0x7, 0x8, 0xffff, 0x6, 0x0, 0x1ff, 0x7, 0x3d27, 0x0, 0x7f, 0x6, 0x1f, 0x3, 0x2, 0x6, 0xffffff3f, 0x0, 0x9, 0x7fffffff, 0x10001, 0x5, 0x8, 0x58c5, 0x0, 0xc0000000, 0xf9a, 0xffffffff, 0x2, 0x8, 0x5d777661, 0xfffffffb, 0x7fff, 0x0, 0x4, 0x9, 0x200, 0x81, 0x10001, 0x3f, 0x42, 0xcc, 0x611abc63, 0x8001, 0x9, 0xec, 0xe1, 0xfffffffa, 0xfd, 0x7, 0x1, 0x3, 0x42, 0x101, 0x62f, 0x3f]}]}, @TCA_CGROUP_POLICE={0x34, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x46}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_CGROUP_ACT={0x3190, 0x1, [@m_gact={0x158, 0x1e, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x10000, 0x0, 0x80000000, 0x100}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a49}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1434, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2299, 0x3}}]}, {0xed, 0x6, "e177901ce8f6042aee7d3f8320e1addd9a92a4c4d85e0dc212e514f95c1a4a39e246766be672abe0e72c2ffb5c4a8a238a1f37046b18183467acb2218b715ce2d260befa286500b6290350e1a34fcc38eb8478a77f9db348957a8773b74489056d8a6c9c955de378349ba96cde22a2630df61a8815d9236ca301564b759ebbaf7e73d6561c2a86299de56ae2826e3ae06a39f8c8ee6c923fe6fd074f7b84f95d2a3bb132b8f4bfc5b5af42b6704b44ec1c23de042a82236f2fda980d8fc7c2bf7b57ecac4892f1b3482a3d6da434c7994c7cde747e04e02d33a9366262429eeae8443354af6fc0a775"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x1040, 0x4, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "bf692aabfaa4dcb69ad39a6a33044d94"}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x130, 0xf, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffe01, 0x5, 0x6, 0x40, 0xce}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={[], 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffff, 0x10000, 0x4, 0xffff8000, 0x10000}, 0x4}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x2, 0x1, 0x4, 0x6}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x71, 0x6, "5b7af481091fafba4428dbc3913c82bffa26948386e02ce6ef501a9ed7c18b65672933401dfd86378c5e7f6d6982fd6f9a2980006c039b54e25caab707a33f10bd31bfab41c8c4cca1c724b3fcbe7406308ac4dcc224b159483beaa69d97f88726baad98ad2e44baf4f1a00514"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x1ec4, 0x13, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x1e3c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0x80, 0x7, 0x1, 0x1ff, 0x4, 0x8001, 0x200, 0x401, 0x20, 0x80000000, 0x101, 0x8001, 0x3f, 0x200, 0x4, 0x9, 0x9, 0xff, 0x112a, 0x1f, 0x4, 0x0, 0x101, 0x3, 0x800, 0x1, 0x3, 0x3, 0xf1a, 0xfc000000, 0x2, 0x398, 0x9, 0x3cbe, 0x400, 0x5, 0x8, 0x7ff, 0x7, 0xd149, 0x36, 0x7ff, 0x2, 0x1, 0x6, 0x6260, 0x0, 0x3da, 0x1000, 0x7fff, 0x2, 0xb1, 0x81, 0xe2, 0x7, 0x8000, 0x4, 0x7, 0x6, 0x5, 0x1, 0x9, 0x1, 0x1, 0x40, 0x9, 0x4, 0x0, 0xffff, 0x7ff, 0x3, 0xd4, 0x5, 0x2, 0x80000000, 0x807, 0xfffffffc, 0x4, 0x2, 0x4, 0x3ff, 0xfffffff9, 0x9e0b, 0x98af, 0x8, 0x4, 0x4, 0x4, 0x4bc1a613, 0x8, 0x20, 0x6, 0xd6a, 0x8, 0x4a9f, 0x8, 0x3, 0x8, 0x986, 0x0, 0x3ff, 0x10001, 0x200, 0x214, 0x2, 0xfffffffa, 0x400, 0x0, 0x4424, 0x80000001, 0x7, 0x6, 0x4, 0x2, 0x7, 0xc5, 0x1, 0x5, 0x4, 0x0, 0x8, 0x5, 0x9, 0x8, 0x2, 0x80, 0x1, 0xffffff33, 0xcf, 0x10000, 0x80000001, 0x1, 0x6, 0x3, 0x7, 0xfff, 0x81, 0xffff, 0xfffffffa, 0x3f, 0x2, 0x7, 0x9, 0x8, 0x7, 0x4, 0x8, 0x7, 0x2, 0x7f, 0x7, 0x0, 0x6, 0x2bdd, 0xbbf4, 0xffffffff, 0x7, 0x7, 0x7, 0x1, 0x2, 0x80, 0x5, 0xe5, 0x2, 0x3ff, 0x100, 0x8001, 0x2, 0x7f, 0x81, 0x6, 0x10000, 0x4, 0xecf3, 0x8, 0x5, 0x8000, 0x1ff, 0x5, 0x7, 0x1, 0x5, 0x4, 0x7, 0xbeb, 0xffffffff, 0x800, 0xab08, 0x5, 0x7, 0x2, 0x2, 0x7, 0x5, 0x5, 0x40, 0x468c, 0x80000001, 0x3, 0x101, 0x5, 0x4, 0x8, 0x7, 0x3, 0x0, 0x9, 0x5, 0x6, 0x73b2, 0x7, 0x1, 0xeeb2, 0x6b, 0x382c, 0x1, 0x5, 0x8000, 0x800, 0x1, 0x4, 0x1b, 0x5, 0xffffffff, 0x149b, 0xff, 0x8c8, 0xfffffc00, 0x7, 0x4, 0x8, 0x5, 0x1f, 0x2, 0x7, 0x17, 0x7fff, 0xeb, 0x0, 0xd92, 0x1f, 0x23d1eb17, 0x9, 0x6, 0xb6, 0xfff, 0x10000, 0x1, 0x8000, 0xd5a5, 0x0, 0x9, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x9, 0x81, 0x4, 0x3ff, 0x80, 0x9bc, 0x1, 0x7, 0x3, 0x6, 0x3, 0x3, 0x2f4, 0x2307, 0x1ff, 0x0, 0xff, 0x6, 0x7ff, 0x2, 0x80000000, 0x3, 0xef, 0x4, 0x8000, 0xfffff001, 0x2, 0x1, 0xfffffbff, 0x3, 0x7, 0x1f, 0x6d63, 0xfffffff9, 0x4e0, 0x8, 0x4, 0x0, 0x2, 0x6, 0x8000, 0x2, 0x7, 0x0, 0x3ff, 0x1ff, 0x7f, 0x89, 0xa2, 0x1ff, 0xb3c, 0xfffffffc, 0x4, 0x8, 0x9, 0x4, 0x80000000, 0x8, 0xb7, 0x6, 0x8220, 0x8, 0x1000, 0x1000, 0xffff, 0xe6f7, 0x7fff, 0x9, 0x9, 0x20, 0x10001, 0x5, 0x0, 0x1, 0x3, 0x20, 0x7, 0xfffffffd, 0x8000, 0xfffffff9, 0x2, 0x2ec, 0x0, 0xffff, 0x3, 0xd0, 0x9, 0x4, 0x8, 0xbcb, 0x0, 0x7ff, 0xaba, 0x4, 0x81, 0xfffffff9, 0x1000, 0x40, 0x5, 0x33a, 0x8, 0x0, 0x9bc8, 0x1ff, 0x7f, 0x6, 0x8, 0x3f, 0x3, 0x0, 0x1, 0x2, 0xfff, 0x0, 0x2, 0x6, 0x9, 0x6, 0x57e8688f, 0x2, 0x616, 0x1ff, 0x84, 0xdbc, 0x5, 0x2, 0x7, 0x0, 0xefb, 0x0, 0x20, 0x10001, 0x9, 0x200, 0xbb, 0x100, 0x9, 0x80, 0x2, 0x0, 0x0, 0x6, 0x3, 0x6, 0x1, 0x9, 0x2, 0x200, 0x9, 0x1, 0x3f, 0x6473eeab, 0x6236, 0x5, 0x8000, 0x7, 0x7fff, 0x8, 0x1, 0x9242, 0x9, 0x148, 0xd028, 0x800, 0x8000, 0x4, 0x6, 0x0, 0x6, 0x6, 0x8, 0x9, 0x5, 0x4, 0x7fffffff, 0x100, 0x7, 0x249, 0x5, 0x3f, 0x7, 0x7, 0x5e2d, 0x1ff, 0x7ff, 0x800, 0xfffffeff, 0x0, 0x80000000, 0x3, 0x1, 0x7ff, 0xe959, 0x0, 0x62cd, 0x38, 0xffffffff, 0x4, 0x61bf, 0xcc, 0x0, 0x9, 0xed, 0x8, 0xfffffffe, 0x5, 0x5, 0x8, 0x7fffffff, 0x0, 0x7fffffff, 0xff, 0x1, 0xcded, 0x2, 0x0, 0x9, 0xfffffff8, 0x6, 0x6, 0x8, 0x0, 0x5, 0x7ff, 0x400, 0x3, 0x7, 0x1b000000, 0x7, 0xd5, 0xc55, 0x8, 0x6, 0xa4be, 0x1, 0x9, 0x401, 0x3, 0x80, 0x5, 0x2, 0x3, 0x629, 0xef1b, 0x5, 0x9, 0x100, 0x4, 0x3, 0x80000000, 0xfffffff7, 0x2, 0xfffffffb, 0x101, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x60b, 0x7f, 0xde, {0x2, 0x0, 0x3, 0x5, 0x0, 0xe32d}, {0x82, 0x2, 0x2, 0x7fff, 0x1, 0xfffffeff}, 0x27, 0x20, 0x6}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1a8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4422, 0x9, 0x5, 0xffffffc1, 0xfffffff9, 0x2, 0x100, 0x7, 0x6, 0x7fff, 0x8001, 0xfff, 0xffffff80, 0x8b92, 0x0, 0x10000, 0x1, 0x8, 0x8, 0x4, 0x1, 0x3f, 0x595, 0x3, 0xe50d, 0x8, 0x1ff, 0x0, 0x10001, 0x80, 0x8, 0x5, 0x809, 0x8, 0x400, 0x10001, 0x81, 0x4, 0x80, 0x4, 0x7, 0xff, 0x6a1, 0x3, 0x80000001, 0xfffff7af, 0x8e8, 0x7, 0x6, 0x8, 0xffff, 0x7ff, 0x357, 0xdee, 0x1, 0x4, 0x1000, 0xd65, 0x7ff, 0x7, 0x1000, 0x603cfbdf, 0x3f, 0x4, 0x9, 0x0, 0x80, 0x10000, 0x100, 0x3f, 0x6, 0x5, 0x4, 0x200, 0x5, 0xfff, 0x200, 0x1, 0xfffffff7, 0xffffffff, 0x8, 0x3, 0x32c, 0x7fff, 0xfffffff9, 0x7, 0x6, 0x8000, 0x9, 0x80, 0x1, 0x5, 0xc96, 0x1, 0x3f, 0x6519, 0xfff, 0x400, 0x798, 0xb5e4, 0x6, 0x8, 0x7, 0x2, 0x1ff, 0x885b, 0xfffffff7, 0x9, 0x60, 0x7, 0x27, 0x5, 0x6, 0x40, 0x3, 0x6, 0x6, 0x2, 0x5, 0xfd, 0x100, 0x7, 0x20, 0x5, 0x80, 0x5, 0x5, 0x7fff, 0x1, 0x101, 0x1, 0x1, 0xb2f, 0x9, 0x2000000, 0x4, 0x0, 0x9fb, 0x66, 0x8e, 0x40, 0x91f, 0x100, 0xa1a, 0x2, 0x5, 0x0, 0x8, 0x1, 0x8, 0x100, 0x9, 0x2, 0xd48, 0x100, 0x1, 0x2, 0x8610, 0x7, 0x0, 0xffffffff, 0x80, 0xb, 0x3f, 0x4, 0x81, 0x2, 0x2680000, 0x4, 0x8, 0xe414, 0x80000000, 0x9829, 0x4, 0x3, 0x6, 0x8, 0x1, 0xbd90, 0x9, 0x2, 0x4, 0xffff0001, 0x7ff, 0xfffffff7, 0x4, 0x5, 0x400, 0x6, 0x53, 0x2, 0x2, 0x8, 0xe7, 0x7, 0x6f5b1858, 0x9, 0x2, 0x401, 0xf5, 0x9, 0x7, 0x8, 0x1, 0x9, 0x3, 0x8, 0x7fc00000, 0x100, 0x9, 0x400, 0x2000000, 0x9, 0x7, 0x8, 0xc50, 0x81, 0x4, 0x2, 0xfff, 0x8, 0x7, 0x0, 0x8, 0x1, 0x0, 0x80000001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x80800, 0x6, 0x4, 0x4, 0x312c, 0xfffffffa, 0x4, 0x3, 0x800, 0xfffffffa, 0xffff, 0x4, 0x8abc, 0xba, 0x80000001, 0x2, 0x7ff, 0x40, 0x87b8, 0x9, 0x5, 0x1, 0x2, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6d631cba, 0x6, 0x8, 0x4, 0x9, {0x1, 0x2, 0x1, 0x8001, 0x80, 0x9}, {0x6, 0x3, 0xfffc, 0x9, 0x100, 0x6802}, 0xdbe, 0x9, 0x800}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x200, 0x10001, 0x80, 0x7f, 0x81, 0x2, 0x6, 0x4, 0xfbd1, 0x1ff, 0x2, 0xffff, 0x635a, 0x100, 0xd6a, 0xf5d2, 0x800, 0x2, 0x3, 0x3ff, 0x8, 0x5, 0x9, 0x2, 0x8, 0x1, 0x4, 0x41d, 0xffffffff, 0x6, 0x4, 0x36f, 0x25a6000, 0xffff, 0x1, 0xe0, 0x7c8, 0x1, 0x52, 0x400, 0x1, 0x5, 0x3, 0x4, 0x80000000, 0x1f, 0x3f, 0x7, 0xc2ee, 0x8, 0x7fffffff, 0xfffffdd9, 0x3, 0x0, 0x3, 0x800, 0x1, 0x3, 0x9, 0x7, 0x5d, 0x3, 0x4, 0x0, 0x1, 0xfff, 0x5, 0x8, 0x0, 0x8, 0x80, 0x3, 0x5, 0x9, 0x5, 0x7, 0x4, 0x1, 0x8, 0x4, 0x7, 0x7fff, 0x3, 0x9, 0x6, 0x7df64677, 0x7143, 0x1, 0x5, 0x4, 0xffff0000, 0x8, 0x0, 0x1, 0x0, 0x3, 0x10000, 0x7, 0x7, 0x5, 0x6, 0x8000, 0x8100, 0x6a6f, 0x1f, 0x5, 0x2f8, 0x7, 0xff, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0xed9a, 0x1000, 0x9, 0x4, 0x8, 0x6, 0x2, 0x8000, 0x1, 0x80000001, 0x4, 0x200, 0xfffffff7, 0x3, 0xcfc1, 0xdc41, 0x5, 0x40, 0x75, 0x4, 0x3, 0x4, 0x4, 0x5, 0x9, 0x8000, 0x0, 0xfffffffc, 0x2, 0x3, 0x2, 0x5, 0x2, 0x8000, 0x5, 0x1, 0xfff, 0x6, 0x2, 0xbecc, 0xfffffffd, 0x7ff, 0x100, 0x1, 0xff, 0x0, 0x2, 0xbf, 0x4, 0x0, 0x80000000, 0x80, 0x6, 0x5, 0xf5e3, 0x7f, 0x5, 0x3, 0x2, 0x5, 0x4, 0x965c, 0xffffff29, 0xda, 0x200, 0x8000, 0x0, 0x5, 0x800, 0x0, 0x2, 0x3, 0x7d, 0x5, 0x0, 0x4, 0x7ff, 0x80, 0xa340, 0x1, 0x7, 0x9, 0x3, 0x5, 0x8, 0x49a, 0x9, 0x0, 0x8001, 0x4, 0x9, 0x7, 0x7, 0xc91, 0xfffff800, 0x400, 0x9, 0x400, 0x2, 0xfff, 0x7, 0x0, 0x2, 0x4, 0x7fffffff, 0x100, 0x0, 0x4, 0x8, 0x58066f0d, 0x7, 0x0, 0x1000, 0x1ff, 0xffff, 0x8, 0x0, 0x6, 0xffffffff, 0x0, 0x7ff, 0x1, 0xfffffff7, 0x4, 0x81, 0x8, 0x3ff, 0x3, 0x80000001, 0x72b1f9c0, 0xff, 0x0, 0x9, 0x31, 0x0, 0x100, 0x4, 0x9, 0x1, 0x80000000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x6, 0x7, 0x7, 0x48, 0x800, 0x8, 0x8, 0x662, 0x0, 0x8000, 0xce39, 0x200, 0x234c, 0x1f, 0xfff, 0x5, 0x9, 0x40, 0x0, 0x5, 0x0, 0x9, 0x2, 0x401, 0xcc5, 0x8, 0x1ff, 0x7, 0x2, 0x8, 0x6, 0xffff, 0xfffffeff, 0x8, 0x3, 0x3, 0x100, 0x2, 0x8, 0x5, 0x4, 0xff, 0x3, 0x9, 0x771, 0x10001, 0x7, 0x9, 0x2, 0x7, 0x1f, 0x5, 0xcf8, 0xffffffff, 0x40, 0x6, 0x9, 0x8, 0x0, 0x3, 0x9, 0x2, 0x4, 0x3, 0x8, 0xffffed2d, 0xffff, 0x7, 0x8001, 0x2, 0x81, 0x5b, 0x6, 0x4, 0x0, 0x10001, 0x4776, 0x1, 0xacb0, 0x4c, 0x8, 0x90, 0xc7, 0x0, 0x4, 0x1, 0x1, 0x6, 0x7, 0x4, 0x10000, 0x8, 0x5, 0x4, 0x4, 0x6, 0x2, 0x2d, 0x1, 0x7, 0x1, 0x8, 0x100, 0x8001, 0x0, 0x4, 0x7f, 0x200, 0x3, 0x8, 0x0, 0x4, 0x5, 0x9, 0x8, 0x3, 0x0, 0x3, 0x2, 0x8000, 0x101, 0x1, 0x40, 0x3, 0xcc2, 0x2, 0x1, 0x0, 0x2, 0x5, 0x7fffffff, 0x2, 0x9, 0x9, 0x4ac5, 0x3, 0x80000000, 0x0, 0x5, 0x7, 0x2, 0xadb, 0x4, 0x9, 0x0, 0x8, 0x4, 0x3, 0x0, 0xff81, 0x7fff, 0x3, 0x6b, 0x3, 0x401, 0x1, 0x1ff, 0x7, 0xfffffffc, 0x79c13118, 0x4, 0x4, 0x0, 0x81, 0x0, 0x3ff, 0x1, 0x1000, 0x0, 0x0, 0x4, 0x8ac78000, 0x80000000, 0x7fffffff, 0x8, 0x2e, 0x8, 0xc6d, 0x9, 0x0, 0x10000, 0x2, 0x1, 0x7, 0x2, 0xffff9f16, 0x4, 0x6, 0xfff, 0x0, 0x800, 0x3, 0xedd, 0x98a, 0x4, 0x0, 0x4, 0x7, 0x4, 0x9, 0xffffff2b, 0x4, 0x101, 0x5, 0xe872, 0x91f7, 0x7f, 0x9, 0x7, 0x3, 0x8, 0x81, 0x0, 0x4e84e90c, 0xfff00, 0x27, 0x401, 0x1, 0x9, 0x1, 0x3, 0x80, 0x1, 0x9, 0x7, 0x8, 0xffffffff, 0x401, 0x7fff, 0x3, 0x101, 0x9, 0x401, 0x7ff, 0x3, 0xad5, 0x0, 0x7ff, 0x7f, 0x0, 0xffffff00, 0x2, 0x9, 0x100, 0x5, 0x7ff, 0x6, 0x7, 0x9, 0x8000, 0xfff, 0x2, 0x8, 0x1f, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x21e, 0x3, 0x597, 0xfffffffb, 0x3, {0x7, 0x0, 0xff, 0x9, 0xcbe1, 0xf61}, {0xfc, 0x0, 0xd9, 0x400, 0x6, 0x1ed}, 0x4, 0x8, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x7fffffff, 0x2, {0x2, 0x2, 0x9, 0x8, 0x7, 0x7}, {0xff, 0x1, 0x2, 0x7, 0x1, 0x1a1e}, 0x3, 0x401, 0x1effdf60}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffe00}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x1, 0x887a, 0x3, {0x0, 0x2, 0x80, 0x101, 0x0, 0x76e}, {0x4, 0x2, 0x9, 0x7, 0x3, 0x7}, 0x84c, 0x4, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x966c, 0x9, 0x5, 0x8fe6, 0x5, 0x10001, 0x1, 0x5, 0x6, 0x6, 0xd6, 0x4, 0x10001, 0xc9, 0x1, 0x0, 0x4637, 0x4, 0x0, 0x85, 0x0, 0x151f, 0x2, 0x1c9b, 0x0, 0x7fffffff, 0x1, 0x1, 0x7, 0x50b, 0x401, 0x8, 0x5, 0x584, 0x6, 0x7fffffff, 0x1, 0x80000001, 0x9, 0xb0c, 0x2000000, 0x8, 0x3066, 0x9, 0x6000, 0x20, 0x6, 0x0, 0x7fffffff, 0x1, 0xc00000, 0x6, 0x77cd, 0x8, 0x6, 0x0, 0x6, 0x1, 0x79, 0x620e, 0x20, 0x5d62, 0x7, 0x0, 0xd2, 0x3f, 0xfffffff9, 0x6, 0x7fffffff, 0x8, 0x0, 0x1ff, 0x200, 0x25d, 0x6, 0x9, 0x8, 0x9, 0x3f, 0x800, 0x10000, 0x4, 0x1, 0x3, 0x80000001, 0xfb5e, 0x2, 0x400, 0x9, 0xfc, 0x1000, 0x1, 0x8000, 0x3, 0x7f, 0x2a4, 0x101, 0xffffffd3, 0x3f, 0x1, 0x2, 0xc2444165, 0x401, 0x6, 0x1, 0x4, 0x80, 0x611, 0x7, 0x100, 0x0, 0x400, 0x4, 0x8, 0x8, 0xfffffff9, 0xe270, 0xa4, 0xfffffffc, 0x8, 0x3, 0x1f, 0x800, 0x2, 0xaf, 0x3, 0x800, 0x3, 0x5, 0x5, 0x0, 0x4, 0x7, 0x7, 0x0, 0x7fff, 0xf72b, 0x0, 0x80000001, 0x1, 0x81, 0x6, 0x7f, 0x7, 0xe84dd80, 0x4, 0x2, 0x3, 0x6, 0x2, 0x5c, 0x3, 0x1, 0x8, 0x89, 0x9, 0xc0b, 0x1ff, 0x0, 0x497, 0x0, 0x8001, 0x8000, 0x83bb, 0x8, 0x1ff, 0xb33, 0x3, 0x6, 0x7, 0x496, 0x1f, 0x81, 0x101, 0x2f3a, 0x66c2, 0x2, 0x1, 0x9, 0x5, 0x9, 0x5, 0x80000001, 0x80, 0x1000, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000001, 0x80000001, 0x4000000, 0x8, 0x0, 0xfffeffff, 0x6, 0x5, 0xf8000000, 0x2, 0x8, 0x1, 0x7fff, 0xff, 0x6, 0x6, 0xffff, 0xfffffffc, 0xe9, 0x9, 0x3, 0x2, 0x0, 0x8, 0x5, 0x7f, 0xe56, 0x2, 0x7, 0xb1, 0x65, 0xde, 0x7fff, 0x6, 0x97f8, 0x6, 0x9, 0x9f5, 0x5, 0x7, 0x7f, 0x8, 0x6, 0x8001, 0x6, 0x101, 0x7, 0x4, 0x7ff, 0x2c, 0x40000, 0x7, 0x7f, 0x1f, 0x0, 0x10000, 0x6b, 0x9, 0x10000, 0x80000000, 0x43b3, 0x401, 0x8, 0x6, 0x1, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x46, 0x10000000, 0x800, 0x469, 0x80000000, {0x7, 0x1, 0x1, 0x101, 0x1, 0x3}, {0x3f, 0x1, 0x3, 0x7, 0x81, 0xe2}, 0x7fffffff, 0x40, 0x100}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x5, 0x2, 0x5, 0x1, 0x4, 0x8, 0x2, 0x923, 0x5, 0x1f, 0x2, 0x2, 0xe1, 0x0, 0x8000, 0x5, 0x1, 0x4, 0x6, 0x401, 0x7fffffff, 0x1ff, 0x9, 0x7, 0x80000001, 0x8d6, 0x8001, 0x1ff, 0x34c, 0xf48, 0x0, 0x5, 0x6, 0x7, 0xfdb, 0x4, 0x6, 0x8000, 0x7, 0x0, 0x7, 0x2, 0x15c5, 0x1, 0x7, 0x1ec, 0x8, 0x100, 0x0, 0xddc6, 0x4, 0x0, 0x7, 0x0, 0xd18, 0x80000001, 0x6, 0x800, 0x5, 0x7, 0x4, 0x2, 0x2, 0x5, 0x6, 0x9, 0x400, 0xa00, 0x2, 0xfffffff8, 0x80000000, 0x400, 0x6b438a32, 0x98ce, 0x6, 0x0, 0x6, 0x4c7, 0x4, 0x5, 0x2, 0xffff, 0x6, 0x6, 0x2, 0x3, 0x5, 0x7, 0x7, 0x1, 0x4037, 0x1, 0x10000, 0x987, 0x50e, 0x0, 0x1, 0x0, 0x8, 0x8000, 0x8, 0x6, 0x9, 0x7, 0x5a1d, 0x8, 0x6, 0x200, 0x1f62, 0x6, 0x8, 0x0, 0x7, 0x775bc00, 0x3, 0x6, 0x0, 0x6, 0x4, 0x10001, 0x1, 0x1f, 0x101, 0x400, 0x9, 0x7fff, 0x6, 0x101, 0x0, 0x401, 0x1, 0x8, 0x0, 0x7333, 0x6, 0xa2cd, 0x9, 0x8, 0x7000000, 0x6, 0x8, 0x2, 0x1, 0x6, 0xcca, 0x3f, 0x6, 0x8, 0x9, 0xcd4c, 0x0, 0x7ff, 0x2, 0x9, 0xfff, 0x7, 0x3f, 0x9, 0x2, 0x6, 0x6, 0x101, 0x0, 0x1, 0x6390, 0x1, 0x19, 0x8, 0x6ed4, 0x1, 0x504, 0x101, 0x80000000, 0x8, 0x4, 0x6, 0x2, 0x4, 0x4, 0x0, 0x1, 0x5, 0x2, 0x3, 0x2, 0xca0, 0x1, 0x6a, 0x5, 0x3, 0x6974, 0x7f, 0xffffffff, 0x3ff, 0x1, 0xffffff31, 0x5, 0xf0bc, 0x1, 0x1, 0x8, 0x8000, 0x618f06a1, 0x1, 0x1, 0xfffffff9, 0x20, 0x6, 0xbf9, 0x6, 0x7f, 0x7ff, 0x4, 0x4, 0x5, 0x2, 0x3ff, 0x0, 0xfffffffd, 0xab, 0x80, 0x523, 0x6, 0x3, 0x7ff, 0x1000, 0x4, 0x29, 0x1, 0x65d7, 0x3, 0x0, 0x4, 0x400, 0xfffffffc, 0x2, 0x7, 0x100000, 0x1, 0x89, 0xffff, 0x10001, 0x1, 0x1000, 0x40, 0x494, 0x2, 0x2, 0x9, 0x10001, 0x4a, 0x1f, 0x8, 0xfff, 0x101]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd78b}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]]}, {0x5d, 0x6, "e7bb2db3ca196c72baa74f6e537136e83e72176097f496480d67cfad31531e50b5650129a78ad20770b8226f7216a443b4186d4ab8ef984ea452d5ca65fb2b064abfe72c6a3984b9d7d1360653f1e9323b34ed36b574302c49"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xe0}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x5b5c}, 0x1, 0x0, 0x0, 0x54}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000006280)={0xe0, 0x0, 0xf0de41b5e7e993c8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x74}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x34}}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004001) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0104020000000000140012800b00696467650000040002800000000007ea6110cd2d18f08480191d2e493cda0d5779bfe934f6c3d1de9190dea72f60966f9b2468edc15b581894b732daa101dd9037ccaccc7ca6c62f9be432863f7fd2a7bebeba833aa532cea146156e669284847f8c888bd684d4f053b6c032bfeb758d7f1189d5b674024ce28d7894f12877843afcc86ee29ec32db813e123283accb672bc232f7e20d2e109ace80000000000000000"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 14:35:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r4, 0x3}}, 0x20}}, 0x0) [ 873.935431][ T8215] __nla_validate_parse: 24 callbacks suppressed [ 873.935450][ T8215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 873.983219][ T8201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 873.993807][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 874.021460][ T8248] device veth176 entered promiscuous mode [ 874.054666][ T8248] device veth177 entered promiscuous mode [ 874.068864][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 874.088022][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 874.225090][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 874.266870][ T8288] FAULT_INJECTION: forcing a failure. [ 874.266870][ T8288] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 874.289738][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 874.319572][ T8288] CPU: 0 PID: 8288 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 874.328304][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.338401][ T8288] Call Trace: [ 874.341699][ T8288] dump_stack+0x107/0x163 [ 874.346088][ T8288] should_fail.cold+0x5/0xa [ 874.350617][ T8288] __alloc_pages_nodemask+0x189/0x730 [ 874.356032][ T8288] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 874.362824][ T8288] ? find_held_lock+0x2d/0x110 [ 874.367624][ T8288] ? fs_reclaim_release+0x9c/0xe0 [ 874.367745][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 874.372744][ T8288] alloc_pages_current+0x18c/0x2a0 [ 874.387114][ T8288] kmalloc_order+0x32/0xd0 [ 874.391575][ T8288] kmalloc_order_trace+0x14/0x130 [ 874.396640][ T8288] vhost_dev_set_owner+0x490/0xa10 [ 874.401779][ T8288] ? vhost_disable_notify+0x190/0x190 [ 874.407162][ T8288] ? vhost_flush_work+0x20/0x20 [ 874.412027][ T8288] ? __mutex_lock+0x61b/0x1110 [ 874.416796][ T8288] ? vhost_vsock_dev_ioctl+0x377/0xb80 [ 874.422270][ T8288] vhost_dev_ioctl+0xb47/0xe60 [ 874.427038][ T8288] ? vhost_enable_notify+0xa00/0xa00 [ 874.432342][ T8288] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 874.438594][ T8288] ? do_vfs_ioctl+0x27d/0x1090 [ 874.443365][ T8288] ? generic_block_fiemap+0x60/0x60 [ 874.448657][ T8288] ? lock_downgrade+0x6d0/0x6d0 [ 874.453505][ T8288] vhost_vsock_dev_ioctl+0x385/0xb80 [ 874.458791][ T8288] ? copy_overflow+0x30/0x30 [ 874.463392][ T8288] ? __fget_files+0x288/0x3d0 [ 874.468068][ T8288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 874.474309][ T8288] ? copy_overflow+0x30/0x30 [ 874.478897][ T8288] __x64_sys_ioctl+0x193/0x200 [ 874.483660][ T8288] do_syscall_64+0x2d/0x70 [ 874.488185][ T8288] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 874.494117][ T8288] RIP: 0033:0x45e219 [ 874.498034][ T8288] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:35:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2268) 14:35:54 executing program 0 (fault-call:9 fault-nth:8): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 874.517730][ T8288] RSP: 002b:00007fee8b7b7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.526145][ T8288] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 874.534281][ T8288] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 874.542243][ T8288] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 874.550208][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 874.558169][ T8288] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c 14:35:54 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc340, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x40001, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010007000000000002000800", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040002000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="1000010000000000200006000000000030c0b2b8ff9643cffd2d389c0482eebd344890da67a141fb1ef9df0e7b0aacf98db886fd6d023e21fce73b1b7fa9b9ef50cd2bd228f4b4cd9b0de9805708d8ef286165e07b59e2ef004f7164ca5a1f3b4260333fdfd02182c496bd96a3c670dac11a9752fd49b6"], 0x74, 0x3) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000000b2ea3a", @ANYRES64=0x0], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="34f9fb3daafacba313eb5d5eeabb16284098a91f21de38b9942ac5f7c441291a4d3ab2560dd0c3962ede4d821e5609d28f7f22c4a84da0238b92608210fe33d5d839a2eb0b0a534b0cf37cb66c244de80496aba1888cf5", 0x57, 0x24000001, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000009c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 874.804696][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 874.823075][ T8351] FAULT_INJECTION: forcing a failure. [ 874.823075][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 874.838774][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 874.855593][ T8351] CPU: 1 PID: 8351 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 874.864321][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.874421][ T8351] Call Trace: [ 874.877720][ T8351] dump_stack+0x107/0x163 [ 874.882086][ T8351] should_fail.cold+0x5/0xa [ 874.886612][ T8351] ? vhost_dev_set_owner+0x768/0xa10 [ 874.892445][ T8351] ? vhost_dev_set_owner+0x768/0xa10 [ 874.897924][ T8351] should_failslab+0x5/0x10 [ 874.902458][ T8351] __kmalloc+0x72/0x3e0 [ 874.907336][ T8351] vhost_dev_set_owner+0x768/0xa10 [ 874.912826][ T8351] ? vhost_disable_notify+0x190/0x190 [ 874.918277][ T8351] ? vhost_flush_work+0x20/0x20 [ 874.923155][ T8351] ? __mutex_lock+0x61b/0x1110 [ 874.927942][ T8351] ? vhost_vsock_dev_ioctl+0x377/0xb80 [ 874.933477][ T8351] vhost_dev_ioctl+0xb47/0xe60 [ 874.938291][ T8351] ? vhost_enable_notify+0xa00/0xa00 [ 874.943621][ T8351] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 874.949874][ T8351] ? do_vfs_ioctl+0x27d/0x1090 [ 874.954679][ T8351] ? generic_block_fiemap+0x60/0x60 [ 874.959898][ T8351] ? lock_downgrade+0x6d0/0x6d0 [ 874.964786][ T8351] vhost_vsock_dev_ioctl+0x385/0xb80 [ 874.970098][ T8351] ? copy_overflow+0x30/0x30 [ 874.974694][ T8351] ? __fget_files+0x288/0x3d0 [ 874.979398][ T8351] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 874.985659][ T8351] ? copy_overflow+0x30/0x30 [ 874.990248][ T8351] __x64_sys_ioctl+0x193/0x200 [ 874.995013][ T8351] do_syscall_64+0x2d/0x70 [ 874.999434][ T8351] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 875.005366][ T8351] RIP: 0033:0x45e219 [ 875.009254][ T8351] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 875.028902][ T8351] RSP: 002b:00007fee8b7b7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.037340][ T8351] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 875.045317][ T8351] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 875.053401][ T8351] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 875.061390][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 875.069360][ T8351] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c 14:35:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x2}}, 0x20}}, 0x0) 14:35:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0x9}}, 0x0) 14:35:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2280) 14:35:55 executing program 0 (fault-call:9 fault-nth:9): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x25f, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000100)=0x7, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 875.370667][ T8372] FAULT_INJECTION: forcing a failure. [ 875.370667][ T8372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.410275][ T8372] CPU: 1 PID: 8372 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 875.419005][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.429085][ T8372] Call Trace: [ 875.432382][ T8372] dump_stack+0x107/0x163 [ 875.436744][ T8372] should_fail.cold+0x5/0xa [ 875.441280][ T8372] _copy_to_user+0x2c/0x150 [ 875.445833][ T8372] simple_read_from_buffer+0xcc/0x160 [ 875.451358][ T8372] proc_fail_nth_read+0x187/0x220 [ 875.456424][ T8372] ? proc_exe_link+0x1d0/0x1d0 [ 875.461215][ T8372] ? security_file_permission+0x248/0x560 [ 875.466978][ T8372] ? proc_exe_link+0x1d0/0x1d0 [ 875.471772][ T8372] vfs_read+0x1b5/0x570 [ 875.475963][ T8372] ksys_read+0x12d/0x250 [ 875.480234][ T8372] ? vfs_write+0xa30/0xa30 [ 875.484675][ T8372] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 875.490942][ T8372] ? __secure_computing+0x241/0x360 [ 875.496239][ T8372] do_syscall_64+0x2d/0x70 [ 875.500677][ T8372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 875.506602][ T8372] RIP: 0033:0x417b11 [ 875.510520][ T8372] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 875.530154][ T8372] RSP: 002b:00007fee8b7b7c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 875.538599][ T8372] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417b11 [ 875.546596][ T8372] RDX: 000000000000000f RSI: 00007fee8b7b7cb0 RDI: 0000000000000004 [ 875.554588][ T8372] RBP: 00007fee8b7b7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 875.562579][ T8372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 875.570566][ T8372] R13: 00000000016afb5f R14: 00007fee8b7b89c0 R15: 000000000119bf8c 14:35:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4}}, 0x20}}, 0x0) 14:35:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0xa}}, 0x0) 14:35:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000040)='./bus\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x10) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 14:35:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2298) 14:35:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 14:35:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x5}}, 0x20}}, 0x0) 14:35:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0xb}}, 0x0) 14:35:58 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc340, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x40001, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010007000000000002000800", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040002000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="1000010000000000200006000000000030c0b2b8ff9643cffd2d389c0482eebd344890da67a141fb1ef9df0e7b0aacf98db886fd6d023e21fce73b1b7fa9b9ef50cd2bd228f4b4cd9b0de9805708d8ef286165e07b59e2ef004f7164ca5a1f3b4260333fdfd02182c496bd96a3c670dac11a9752fd49b6"], 0x74, 0x3) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000000b2ea3a", @ANYRES64=0x0], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="34f9fb3daafacba313eb5d5eeabb16284098a91f21de38b9942ac5f7c441291a4d3ab2560dd0c3962ede4d821e5609d28f7f22c4a84da0238b92608210fe33d5d839a2eb0b0a534b0cf37cb66c244de80496aba1888cf5", 0x57, 0x24000001, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000009c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:35:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x2, 0x0) [ 885.677516][ T8432] __nla_validate_parse: 12 callbacks suppressed [ 885.677538][ T8432] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:36:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x200023) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x10, 0x0) 14:36:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc340, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x40001, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010007000000000002000800", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040002000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="1000010000000000200006000000000030c0b2b8ff9643cffd2d389c0482eebd344890da67a141fb1ef9df0e7b0aacf98db886fd6d023e21fce73b1b7fa9b9ef50cd2bd228f4b4cd9b0de9805708d8ef286165e07b59e2ef004f7164ca5a1f3b4260333fdfd02182c496bd96a3c670dac11a9752fd49b6"], 0x74, 0x3) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000000b2ea3a", @ANYRES64=0x0], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="34f9fb3daafacba313eb5d5eeabb16284098a91f21de38b9942ac5f7c441291a4d3ab2560dd0c3962ede4d821e5609d28f7f22c4a84da0238b92608210fe33d5d839a2eb0b0a534b0cf37cb66c244de80496aba1888cf5", 0x57, 0x24000001, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000009c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:36:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/131, 0x83) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x22b0) 14:36:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6}}, 0x20}}, 0x0) [ 885.963735][ T35] audit: type=1326 audit(1610548566.053:82): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8452 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 991.051173][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 991.057853][ C0] rcu: 0-...!: (10500 ticks this GP) idle=04e/1/0x4000000000000000 softirq=68857/68857 fqs=1 [ 991.069678][ C0] (t=10501 jiffies g=118797 q=76) [ 991.074805][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g118797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 991.086099][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 991.096077][ C0] rcu: RCU grace-period kthread stack dump: [ 991.101975][ C0] task:rcu_preempt state:I stack:29184 pid: 13 ppid: 2 flags:0x00004000 [ 991.111205][ C0] Call Trace: [ 991.114505][ C0] __schedule+0x90c/0x21a0 [ 991.118961][ C0] ? io_schedule_timeout+0x140/0x140 [ 991.124279][ C0] ? debug_object_destroy+0x210/0x210 [ 991.129682][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 991.134571][ C0] schedule+0xcf/0x270 [ 991.138663][ C0] schedule_timeout+0x148/0x250 [ 991.143537][ C0] ? usleep_range+0x170/0x170 [ 991.148230][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 991.153454][ C0] ? __next_timer_interrupt+0x210/0x210 [ 991.159026][ C0] ? prepare_to_swait_exclusive+0x2d0/0x2d0 [ 991.165012][ C0] rcu_gp_kthread+0xbbe/0x1d70 [ 991.169855][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 991.174736][ C0] ? rcu_core_si+0x10/0x10 [ 991.179187][ C0] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 991.185017][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 991.190240][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 991.196522][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 991.201587][ C0] ? rcu_core_si+0x10/0x10 [ 991.206057][ C0] kthread+0x3b1/0x4a0 [ 991.210156][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 991.216083][ C0] ret_from_fork+0x1f/0x30 [ 991.220694][ C0] NMI backtrace for cpu 0 [ 991.225011][ C0] CPU: 0 PID: 8438 Comm: syz-executor.1 Not tainted 5.11.0-rc3-syzkaller #0 [ 991.233667][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.243709][ C0] Call Trace: [ 991.246978][ C0] [ 991.249848][ C0] dump_stack+0x107/0x163 [ 991.254208][ C0] nmi_cpu_backtrace.cold+0x44/0xd7 [ 991.259405][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 991.264596][ C0] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 991.270632][ C0] rcu_dump_cpu_stacks+0x1f4/0x230 [ 991.275754][ C0] rcu_sched_clock_irq.cold+0x48e/0xedf [ 991.281322][ C0] ? rcutree_dead_cpu+0x50/0x50 [ 991.286157][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 991.290999][ C0] ? __raise_softirq_irqoff+0x93/0x1e0 [ 991.296495][ C0] update_process_times+0x16d/0x200 [ 991.301689][ C0] tick_sched_handle+0x9b/0x180 [ 991.306529][ C0] tick_sched_timer+0x1b0/0x2d0 [ 991.311367][ C0] ? get_cpu_iowait_time_us+0x3f0/0x3f0 [ 991.316895][ C0] __hrtimer_run_queues+0x1c0/0xe40 [ 991.322096][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 991.328063][ C0] ? ktime_get_update_offsets_now+0x268/0x340 [ 991.334131][ C0] hrtimer_interrupt+0x334/0x940 [ 991.339064][ C0] __sysvec_apic_timer_interrupt+0x146/0x540 [ 991.345050][ C0] sysvec_apic_timer_interrupt+0x48/0x100 [ 991.350768][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 991.356748][ C0] RIP: 0010:lockdep_enabled+0x52/0xa0 [ 991.362107][ C0] Code: d2 75 5a 8b 15 0b e2 ab 0b 31 c0 85 d2 74 4c 65 8b 15 e2 38 aa 7e 85 d2 75 41 65 48 8b 1c 25 00 f0 01 00 48 8d bb 84 09 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 [ 991.381729][ C0] RSP: 0018:ffffc90000007c18 EFLAGS: 00000246 [ 991.387792][ C0] RAX: 0000000000000000 RBX: ffff8880b0c41bc0 RCX: 1ffffffff1a0754b [ 991.395751][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880b0c42544 [ 991.403716][ C0] RBP: ffffffff8b373860 R08: 0000000000000000 R09: ffffffff8d03788f [ 991.411676][ C0] R10: fffffbfff1a06f11 R11: 0000000000000000 R12: 0000000000000001 [ 991.419642][ C0] R13: 1ffff92000000fa9 R14: 00000000ffffffff R15: 0000000000000000 [ 991.427630][ C0] lock_is_held_type+0x19/0x100 [ 991.432470][ C0] ? mrp_attr_event+0x280/0x280 [ 991.437329][ C0] rcu_read_lock_sched_held+0x3a/0x70 [ 991.442686][ C0] lock_release+0x5b7/0x710 [ 991.447184][ C0] ? run_timer_softirq+0x1d0/0x1d0 [ 991.452280][ C0] ? call_timer_fn+0x213/0x6b0 [ 991.457027][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 991.461881][ C0] ? mrp_attr_event+0x280/0x280 [ 991.466735][ C0] call_timer_fn+0x227/0x6b0 [ 991.471320][ C0] ? add_timer_on+0x4a0/0x4a0 [ 991.475992][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 991.481176][ C0] ? mrp_attr_event+0x280/0x280 [ 991.486012][ C0] __run_timers.part.0+0x67c/0xa50 [ 991.491115][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 991.495862][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 991.502008][ C0] run_timer_softirq+0xb3/0x1d0 [ 991.506855][ C0] __do_softirq+0x2bc/0xa29 [ 991.511395][ C0] asm_call_irq_on_stack+0xf/0x20 [ 991.516425][ C0] [ 991.519339][ C0] do_softirq_own_stack+0xaa/0xd0 [ 991.524355][ C0] irq_exit_rcu+0x134/0x200 [ 991.528880][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 991.534599][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 991.540566][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 991.546619][ C0] Code: 00 00 00 4d 8b 0b 48 0f bd c8 49 8b 14 24 48 63 c9 e9 66 ff ff ff 4c 01 ca 49 89 13 e9 00 fd ff ff 66 0f 1f 84 00 00 00 00 00 <65> 8b 05 f9 25 8f 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 991.566210][ C0] RSP: 0018:ffffc900026bf720 EFLAGS: 00000246 [ 991.572262][ C0] RAX: 0000000000000000 RBX: ffffea000163f980 RCX: ffff8880b0c41bc0 [ 991.580228][ C0] RDX: 0000000000000000 RSI: ffff8880b0c41bc0 RDI: 0000000000000003 [ 991.588181][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 991.596133][ C0] R10: ffffffff81b0a4b7 R11: 0000000000000000 R12: ffffea000163f988 [ 991.604097][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dead000000000100 [ 991.612067][ C0] ? PageHuge+0x47/0x170 [ 991.616319][ C0] PageHuge+0xe1/0x170 [ 991.620394][ C0] page_remove_rmap+0x594/0x1360 [ 991.625324][ C0] unmap_page_range+0xe30/0x2640 [ 991.630261][ C0] ? vm_normal_page_pmd+0x510/0x510 [ 991.635452][ C0] unmap_single_vma+0x198/0x300 [ 991.640290][ C0] unmap_vmas+0x168/0x2e0 [ 991.644617][ C0] ? zap_vma_ptes+0x100/0x100 [ 991.649298][ C0] ? _raw_spin_unlock_irqrestore+0x25/0x50 [ 991.655263][ C0] exit_mmap+0x2b1/0x5a0 [ 991.659527][ C0] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 991.665553][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 991.671801][ C0] ? __khugepaged_exit+0x2d9/0x470 [ 991.676966][ C0] __mmput+0x122/0x470 [ 991.681028][ C0] mmput+0x53/0x60 [ 991.684734][ C0] do_exit+0xb6a/0x2ae0 [ 991.688879][ C0] ? find_held_lock+0x2d/0x110 [ 991.693629][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 991.698987][ C0] ? get_signal+0x2f4/0x20a0 [ 991.703564][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 991.708407][ C0] do_group_exit+0x125/0x310 [ 991.712996][ C0] get_signal+0x3e9/0x20a0 [ 991.717413][ C0] ? putname+0xe1/0x120 [ 991.721574][ C0] ? kmem_cache_free+0x315/0x350 [ 991.726522][ C0] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 991.732291][ C0] ? do_sys_openat2+0xa1/0x420 [ 991.737062][ C0] ? build_open_flags+0x680/0x680 [ 991.742093][ C0] ? clockevents_program_event+0x12b/0x370 [ 991.747889][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 991.753251][ C0] ? tick_program_event+0xb4/0x140 [ 991.758350][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 991.764577][ C0] ? hrtimer_interrupt+0x6f4/0x940 [ 991.769676][ C0] ? __x64_sys_open+0x119/0x1c0 [ 991.774515][ C0] ? do_sys_open+0x140/0x140 [ 991.779095][ C0] exit_to_user_mode_prepare+0x148/0x250 [ 991.784714][ C0] syscall_exit_to_user_mode+0x19/0x50 [ 991.790173][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 991.796052][ C0] RIP: 0033:0x45e219 [ 991.799928][ C0] Code: Unable to access opcode bytes at RIP 0x45e1ef. [ 991.806750][ C0] RSP: 002b:00007fa8232cfc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 991.815157][ C0] RAX: 0000000000000004 RBX: 0000000000000003 RCX: 000000000045e219 [ 991.823110][ C0] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 0000000020000080 [ 991.831062][ C0] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 991.839017][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 991.846969][ C0] R13: 00000000016afb5f R14: 00007fa8232d09c0 R15: 000000000119bf8c 14:37:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newlink={0x44, 0x10, 0x781, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}}, 0xc}}, 0x0)